2019-08-26 14:34:25
mitre
PUBLISHED
OpenForis Arena before 2019-05-07 allows SQL injection in the sorting feature.