Dan Langille, creator and maintainer of FreshPorts (a popular site for FreeBSD software packages) has documented an SQL injection vulnerability in FreshPorts and how it was exploited. In addition to the linked page, more information is here:
https://news.freshports.org/2023/03/24/freshsource-code-fixe...