SQL injection through getdeleteddocuments.vm template sort parameter

Hi zeroday

I'm honestly not sure how accurate the 14 million spike in the middle of nowhere in https://www.xwiki.org/xwiki/bin/view/ActiveInstalls/Active%20Installs%20v2/ is. But we did receive a (single) ping from an instance claiming to have 14 millions users and to be 3 years old. Maybe some huge air gapped instance (we seem to have more and more of those, especially for big instances, and we don't get stats from these of course) that let one request go through by mistake at some point...