Vendor
An SQL injection vulnerability exists in Kobikom KobiPBX versions prior to r1, allowing attackers to inject arbitrary SQL commands into the backend database.