= 10
In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.