SQL Injection in Cisco Call_manager
CVE-2007-4634
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL c…
Vulnerability class: SQL Injection
EPSS: 0.043 (90.1th percentile) — read the EPSS interpretation.
Affected products
- Cisco Call_manager — versions 3.3\(5\)sr1, 3.3\(5\)sr2, 3.3\(5\)sr2a
- Cisco Unified_communications_manager — versions 3.3\(5\), 3.3\(5\)sr1, 3.3\(5\)sr2a
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)