A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.