Vendor
The java110 MicroCommunity platform up to version 2.0 contains a SQL injection vulnerability in the QueryServiceSMOImpl.fallBack function, allowing remote attackers to execute arbitrary database queries via the fallBackSql argument.