The IMP XForm version 2.0 DatalifeEngine module suffers from a remote SQL injection vulnerability. Continue reading...