EZCMS versions 1.2 and below suffer from blind SQL injection and administrative bypass vulnerabilities.