Atstake Security Advisory A091103-1 – The Asterisk software PBX is vulnerable to a SQL injection attack if a user is able to supply malformed CallerID data.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31630/a091103-1.txt
Source: https://packetstormsecurity.com/files/31630/Atstake-Security-Advisory-03-09-11.1.html