OrangeHRM /index.php/recruitment/viewCandidates sortField SQL Injection Vulnerability

OrangeHRM is an open source human resource management tools , features include employee data management , employee self-service system , attendance , allowances and recruitment and other functions . OrangeHRM /index.php/recruitment/viewCandidates fails to properly filter the 'sortField' POST...