SQL Injection

calibreweb is vulnerable to sql injection. The vulnerability exists in moveheaderelements function in table.js entries of user table are visible which allows an attacker to inject malicious sql queries...