fws-hub/xPapers — Issue #19: SQL injection vulnerability in admin/sql.pl
Author: colinsauze
Created: 2011-10-27 14:20:10+00:00
State: open

This script (which only admin users can run) appears to allow any SQL query to be executed. This is only used by the non-functioning latest harvest page. Its use has been disabled for now due to security concerns.