Melody

The issue concerns SQL injection. It can be exploited via the `$ GET['id']` variable in the dapur/apps/app comment/controller/comment status.php file.

The issue concerns SQL injection. It can be exploited via the `$ GET['id']` variable in the `/dapur/apps/app article/controller/comment status.php` endpoint.

The issue concerns SQL injection in a specific PHP file, allowing potential exploitation via several parameters. The vulnerable parameters include `comment`, `name`, `web`, `email`, `status`, `id` from `$ POST`, and `id` from `$ REQUEST`.

The issue concerns SQL injection in a specific PHP file, sys article.php, located in the dapur/apps/app article directory. This SQL injection is possible via several POST parameters: `parent id`, `desc`, `keys`, and `level`.

The issue concerns SQL injection. It can be exploited via the `name` parameter in the /apps/app comment/controller/insert.php API endpoint.

The issue concerns SQL injection. It can be exploited via the `id` variable in the `/dapur/apps/app article/controller/article status.php` endpoint.

The issue concerns SQL injection in the `article list.php` file, specifically via the `$ GET` parameters `cat`, `user`, `level`, and `iSortCol '.$i. This allows for potential exploitation.

The issue concerns SQL injection. It can be exploited via the `/apps/app article/controller/editor.php` endpoint using the `$ POST['id']` and `$ POST['art title']` variables.