Product
A vulnerability in sqlparse versions 0.6.0 and earlier allows for PHP code injection via unescaped dollar sign sequences in SQL input processed by OutputPHPFilter.