OpenForis Arena before 2019-05-07 allows SQL injection in the sorting feature.

Published Aug 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre