Cpe:2.3:a:worklenz:worklenz:*:*:*:*:*:*:*:*

Authenticated attackers can exploit improper validation of the sort-field parameter in Worklenz <= 3.0.0 to perform blind SQL injection against PostgreSQL backends.