Injection flaw in the legacy hosting control panel
Description
The penetration test showed that a form field in the legacy hosting control panel passes its input straight to the database. With a crafted value the tester read account records of other hosting customers. Few customers still use the panel, but the data is theirs.