Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint.