Quicklert for Digium SQL Injection Vulnerability

Quicklert is an easy-to-use messaging, alerting, and emergency response solution from Quicklert USA, Inc. Quicklert for Digium version 10.0.0 is vulnerable to SQL injection, which originates from the login.jsp page. The vulnerability stems from the application’s lack of validation of externally entered SQL statements. An attacker could use this vulnerability to compromise all data in the database (up to the login ID and password of the admin account) via login.