Cpe:2.3:a:sqlparse:sqlparse:*:*:*:*:*:*:*:*

A vulnerability in sqlparse versions 0.6.0 and earlier allows for PHP code injection via unescaped dollar sign sequences in SQL input processed by OutputPHPFilter.