DataGear injection vulnerability

DataGear is an open source and free data visualization and analysis platform from DataGear, Inc. An injection vulnerability exists in DataGear version 4.60 and earlier versions, which stems from an incorrect manipulation of the parameter sql that can lead to sql injection...