The SQL::Abstract Perl module from versions 1.90_01 until before 2.000001_04 skips the injection_guard check when a function name is supplied via the explicit -func parameter. This allows an attacker to inject arbitrary SQL code by controlling the function name, enabling adversaries to read, modify, or delete data in the database, and potentially execute other harmful commands depending on database privileges.

Perl applications that use the SQL::Abstract module on CPAN, specifically those incorporating versions 1.90_01 through any release prior to 2.000001_04. The vulnerability is tied to the handling of the -func parameter for function names.

The EPSS score is not available and the vulnerability is not listed in CISA KEV, so current exploitation metrics are uncertain. However, the flaw directly facilitates SQL injection, a high‑risk weakness (CWE‑89). Because the check is bypassed regardless of other safeguards, any application that relies on the injection guard for -func is vulnerable. The launch of the exploit would involve supplying a crafted function name to the -func option, making this a remotely exploitable attack vector.