Improper input validation in Oracle Hospitality Reporting and Analytics