An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeManageAction_queryNotice.action noticeInfo parameter.Referenceshttps://github.com/cckevincyh/CompanyWebsite/issues/3