Description PHPSHE 1.7 has SQL injection via the admin.php?mod=order state parameter. References https://github.com/kk98kk0/exploit/issues/2