CVE-2019-9615: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in OFCMS before 1.1.3. It allows admin/system/generate/create?sql= SQL injection, related to SystemGenerateController.java...