SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote malicious users to execute arbitrary SQL commands via the category parameter.
socialcms socialcms 1.0.5