E-Journal CMS SQL Injection / Privilege Escalation

E-Journal CMS suffers from remote SQL injection and privilege escalation vulnerabilities.