SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/17054
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1726
http://www.securityfocus.com/bid/10996