UNISOR CMS suffers from a SQL injection vulnerability that can be used to gain administrative privileges.