critical9.8
CVE-2025-6918
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncvav Virtual PBX Software allows SQL Injection.
Impact
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025.
Affected products
| Product | Affected versions |
|---|---|
| Virtual PBX Software | before 09.07.2025. |
Versions were read from the advisory text. No structured product data has been published for this record yet.