SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code
CWE-89