Archery v1.4.0 to v1.8.5 exists to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session interface.
archerydms archery