Concrete5 prior to 8.5.3 does not constrain the sort direction to a valid asc or desc value.
concretecms concrete cms