CVE-2025-6918

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025...

CVE-2025-6918

Summary : CVE-2025-6918 is a SQL Injection vulnerability in Ncvav Virtual PBX Software caused by improper neutralization of special elements in SQL commands. Affected software/versions : earlier than 2025-09-07 (09.07.2025). Multiple sources (NVD, Red Hat, CVE list, CNNVD, PT Security) consistent...