The triscoop_race_system module form PHP-Fusion is susceptible to a remote SQL injection vulnerability.