BootPlus injection vulnerability

bootplus is a permission management framework by JoeyBling Personal Developer. An injection vulnerability exists in bootplus, which stems from the parameter sort in the file /admin/sys/user/list that causes SQL injection...