Piranha

The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the `pixie user` parameter and the Referer HTTP header in a request to the default URI.