ValuePreference class: SQL Injection

== Steps to reproduce ==
1. Open Sales Order window
2. Go to PO Reference field
3. Enter the folowing string exactly (including '):
'||(select Password from AD_User where AD_User_ID=0)||'
4. Right click and set as value preference.

Take a look in the context and you will see:
P143|POReference == '||(select Password from AD_User where AD_User_ID=0)||'

Logout & login and:
1. go to Tools->Preferences and you will see:
P143|POReference == System
2. go to sales order, and hit new, and in the PO Reference field you will get System.

Best regards,
Teo Sarca