Florian Sander

A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the `what` parameter to an XML-RPC method in the XML-RPC delivery invocation script.