Eno7

**Name of the Vulnerable Software and Affected Versions** beContent version 0.3.1 **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the news.php file. **Recommendations** For beContent version 0.3.1, avoid using the `id` parameter in the news.php file until a fix is available. Consider restricting access to the news.php file to minimize the risk of exploitation.