IT+HA - SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

SQL injection vulnerability in WHERE clause allowing retrieval of hidden data