Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45794.json"