[Issue 9815] Serious SQL injection vulnerability in back-sql