CVE-2010-0702

Опубликовано: 23 фев. 2010

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Ссылки

http://packetstormsecurity.org/1002-exploits/tribox-sql.txt
Exploit
http://www.exploit-db.com/exploits/11508
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/38323
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/56407
VDB Entry
http://packetstormsecurity.org/1002-exploits/tribox-sql.txt
Exploit
http://www.exploit-db.com/exploits/11508
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/38323
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/56407
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:netfortris:trixbox:2.2.4:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00928

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-8pc9-qhj9-cjc3

github

почти 4 года назад