EIP-2026-104254

This advisory details a SQL injection vulnerability in FreePBX 2.5.1, where the 'extdisplay' parameter in config.php is not properly sanitized, allowing arbitrary SQL queries. The proof of concept demonstrates a union-based SQL injection to extract user credentials.