Description rConfig 3.9.2 allows devices.php?searchColumn= SQL injection. References https://twitter.com/sky_xiaoxuan/status/1189420530396303360