ResourceSpace versions 8.6 and below suffer from a remote SQL injection vulnerability. Continue reading...