CVE-2013-2018: 
Linux Debian vulnerability analysis and mitigation

Multiple SQL injection vulnerabilities were discovered in BOINC (Berkeley Open Infrastructure for Network Computing) that allow remote attackers to execute arbitrary SQL commands via unspecified vectors (NVD). The vulnerability was identified in both the server-side scheduler code and user-facing web scripts (OSS Security).

The vulnerability has been assigned a CVSS v3.1 Base Score of 9.8 (CRITICAL) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, and a CVSS v2.0 Base Score of 7.5 (HIGH) with vector (AV:N/AC:L/Au:N/C:P/I:P/A:P). The vulnerability is classified as CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (NVD).

The SQL injection vulnerabilities could allow remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized access to or modification of the database, exposure of sensitive information, or compromise of the system's integrity (NVD).

The major projects were notified and have reportedly fixed these vulnerabilities. Clients are only vulnerable if they're connected to a hostile server (OSS Security).