BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter. 5.6.06 - 5.6.06. Vulnerability found latest version. While installing the app, stack queries are configured as open in SQL and thanks to this we can obtain RCE.