SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')