SQL injection vulnerability in news.php in EMO Realty Manager allows remote malicious users to execute arbitrary SQL commands via the ida parameter.
emophp emo realty manager