SQL Injection

github.com/zhaojh329/rttys is vulnerable to SQL Injection attacks. A specifically crafted attack statement through the username parameter via a maliciously registered account allows an attacker to inject and execute arbitrary SQL queries on the target system.