Product
SQLPad versions prior to 6.10.1 contain a blind template injection vulnerability (CVE-2022-0944) allowing authenticated high-privileged users to execute arbitrary system commands via the /api/test-connection endpoint.