There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.Referenceshttps://github.com/taogogo/taocms/issues/16