DataGear SQL注入漏洞

DataGear is an open source and free data visualization and analysis platform from DataGear. A SQL injection vulnerability exists in DataGear versions prior to 4.5.1, which stems from a problem with the file /analysisProject/pagingQueryData, where manipulation of the parameter queryOrder can lead ...