SQL Injection in version 1.4.3 and below