SQL injection vulnerability in view.php in Machform 2 allows remote malicious users to execute arbitrary SQL commands via the element_2 parameter.
machform machform 2.0