Security XenAPI For XenForo 1.4.1 SQL Injection May 24, 2016 007admin XenAPI for XenForo version 1.4.1 suffers from a remote SQL injection vulnerability.