EIP-2026-107242

The provided text describes an SQL injection vulnerability in FreeSMS 2.1.2, where the 'scheduleid' parameter in 'crc_handler.php' is not properly sanitized. It also mentions cross-site scripting vulnerabilities but does not include exploit code.