Kinsey’s Infor-Lawson (formerly ESBUS) suffers from a remote SQL injection vulnerability.