SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action.
https://www.exploit-db.com/exploits/7160
https://exchange.xforce.ibmcloud.com/vulnerabilities/46741