Just found new SQL vulnarability