SQL Injection

nodebatis is vulnerable to sql injection. The vulnerability exists due to the getInsertSql function in sqlBuilder.js which doesn't escape the key and tableName attributes, allowing an attacker to inject and execute malicious SQL queries...