An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string.Referenceshttps://www.foxitsoftware.com/support/security-bulletins.php