SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie.
- http://securityreason.com/securityalert/4316
- https://www.exploit-db.com/exploits/6536
No PoCs found on GitHub currently.