Kados R10 GreenBee contains a SQL injection vulnerability in the id_to_delete parameter that allows attackers to manipulate database queries. Attackers can craft malicious requests containing SQL statements to extract or modify sensitive database information. The vulnerability enables unauthorized access to backend databases through parameter injection. This represents a critical security flaw that could lead to data breaches and system compromise.