The xmlrpc interface of cobbler was prone to command injectoin
The Open Build Service is an openSUSE project.