Kobikom SQL injection allows database command manipulation
Kobikom database contents could be snooped on.
Summary
An SQL injection flaw in Kobikom lets an attacker manipulate database commands. Versions before KobiPBX-FOP3-SEC-r1 are affected.
What to do
Versions before KobiPBX-FOP3-SEC-r1 are affected, so update to KobiPBX-FOP3-SEC-r1 or newer and read the vendor's advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen