Description DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php. References http://0day5.com/archives/1542/