2019-08-26 17:15:12 2019-08-28 20:18:05

OpenForis Arena before 2019-05-07 allows SQL injection in the sorting feature.