Rating:

Postgresql FileSystem -- why bother with path traversals if you could have SQL injections instead

Original writeup (https://saarsec.rocks/2020/04/26/hitb-pfs.html).