Anwsion injection is common in injection and repair

System/class/cls_action_log_class_inc.php
472 code; public static function get_actions_distint_by_where class

$ SQL = "SELECT MAX (history_id) history_id FROM ". get_table ('user _ action_history '). "WHERE ". $ where. "group by associate_id, associate_type order by history_id DESC ";

$ Where variable is not filtered .. If you use this class, you will suffer ....
Http://wenda.anwsion.com/people/ajax/user_actions/uid-1__actions-1%df%29%29%27%27%27%27

 

Www.2cto.com
Inject official site data to see:



 

Solution:
Use the filtered classes you have fixed to put them in...