Product
DeDeCMS version 53_1_UTF8 is vulnerable to a remote SQL injection attack via the 'sql' argument in /plus/advancedsearch.php, for which public exploit code is available.