Secunia Security Advisory – r0t has reported a vulnerability in OnContent // CMS, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to the pid parameter in index.php isn’t properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41600/sa17596.txt
Source: https://packetstormsecurity.com/files/41600/Secunia-Security-Advisory-17596.html