AdvantechWeb/SCADA version 9.1.5U suffers from a post authentication remote SQL injection vulnerability.