SQL Injection

cas-catalog is vulnerable to SQL injection. The vulnerability is possible because it does not sanitize user-provided input for SQL commands, allowing attackers to inject malicious SQL commands leading to the leakage of sensitive information...