2020-12-17 19:46:25
mitre
PUBLISHED
Time-based SQL injection exists in Spotweb 1.4.9 via the query string.