SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')