Kayrasoft product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2.