Originally was:
"DVWA v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at blind\source\high.php."
Source report: https://github.com/KLSEHB/vulnerability-report/blob/c1f3f27286e435d1bd5893a5fea2ffbe9fb55cbd/Dvwa_vulnerability