CVE-2019-20179

SOPlanning 1.45 has SQL injection via the userlist.php "by" parameter...