Atcom

7 CVEs across 3 Atcom products. Browse Atcom vulnerabilities, severities, and proof-of-concept exploits.

Atcom products with known CVEs

ProductCVEs
Netvolution6
A10w1
A10w Firmware1
Atcom CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-12328Critical9.02019-07-22A command injection (missing input validation) issue in the remote phonebook configuration URI in the web interface of the Atcom A10W VoIP phone with firmware…
CVE-2014-23182014-03-11SQL injection vulnerability in ATCOM Netvolution 3 allows remote attackers to execute arbitrary SQL commands via the m parameter.
CVE-2011-33402011-10-21SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
CVE-2010-49672011-10-21SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter.
CVE-2010-49662011-10-21Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query param…
CVE-2009-51032011-10-21Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable.
CVE-2009-51022011-10-21SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpe_nid parameter.