OV3 Online Administration version 3.0 suffers from multiple unauthenticated remote SQL injection vulnerabilities.