= 4.0
whatsns 4.0 allows index.php?admin_category/remove.html cid[] SQL injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.