vBilling for FreeSWITCH.
http://blaszczakm.blogspot.com/2013/04/vbilling-freeswitch-sqli.html
Michal Blaszczak
1) SQL Injection
reset password any SIP account
file: controllers/customer.php
$sql2 =3D "UPDATE directory_params SET param_value =3D '".$new_password."'
WHERE directory_id =3D '".$record_id."' ";
2) SQL Injection
http://vbilling-host/customer/edit_customer
input Firstname: zuo=E2=80=99;-- (example)
Micha=C5=82 B=C5=82aszczak
http://blaszczakm.blogspot.com