IzyBat Orange casiers before 20221102_1 allows SQL Injection via a getCasier.php?taille= URI.
CWE-89, CWE-89