phpok 6.4.003 is vulnerable to SQL injection in the function indexf() in phpok64/framework/api/callcontrol.php.