SQL injection in ajaxSearchLog
AjaxSearch version +