Add filter on sortfield and sortorder to avoid bad sql request

Example : dolibarr/commande/liste.php?sortfield=c.ref_client&sortorder=asc&begin=&socid=&viewstatut=
replace c.ref_client or asc with bad sql and you get an error