Security SIPhone Enterprise PBX SQL Injection January 31, 2015 007admin Leave a comment SIPhone Enterprise PBX suffers from a remote SQL injection vulnerability that allows for authentication bypass.