CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.Referenceshttps://packetstormsecurity.com/files/145293/CMS-Auditor-Website-1.0-SQL-Injection.htmlhttps://www.exploit-db.com/exploits/43272/