Blind SQL Injection found in cgFormBuildController #5
Description
In this method called 'findOneForJdbc',the params are just stitched in the query statement without security filtering.
And this leads to a SQL injection.
{{ message }}
In this method called 'findOneForJdbc',the params are just stitched in the query statement without security filtering.
And this leads to a SQL injection.