SQL Injection

django is vulnerable to SQL injection. An attacker is able to inject malicious query via QuerySet.orderby...