CVE-2010-0702

 

Published at: - 23-02-2010 09:30

Last modified: - 18-04-2022 11:37

Total changes: - 2

Description

SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• http://packetstormsecurity.org/1002-exploits/tribox-sql.txt
• 11508-Exploit
• 38323-Exploit
• trixbox-phonedirectory-sql-injection(56407)-

 

Keywords

NVD

 

CVE-2010-0702

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures