PT-2012-2160

Name of the Vulnerable Software and Affected Versions OrderSys versions 1.6.4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the where clause parameter to API endpoints such as "index.php", "index long.php", or "index short.php" i...