https://www.exploit-db.com/exploits/25981

漏洞细节尚未披露

source: http://www.securityfocus.com/bid/14258/info

Hosting Controller is prone to an SQL injection vulnerability.

This issue allows a remote attacker to manipulate query structure and logic. It has been reported that the attacker may gain unauthorized access to sensitive information. Other attacks may be possible depending on the capabilities of the underlying database and the nature of the affected query. 

One may input this string into the search box on the affected pages:

'or'1'='1'or'1'='1