eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.
CWE-89