CVE-2011-0960

🗓️ 20 May 2011 22:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 42 Views🌐 WEB

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands.

Reporter	Title	Published	Views	Family All 14
0day.today	Cisco Unified Operations Manager Multiple Vulnerabilities - SOS-11-006	18 May 201100:00	–	zdt
Circl	CVE-2011-0960	18 May 201100:00	–	circl
Tenable Nessus	Cisco Unified Operations Manager < 8.6 Multiple Vulnerabilities	13 Oct 201100:00	–	nessus
Cvelist	CVE-2011-0960	20 May 201122:00	–	cvelist
Exploit DB	Cisco Unified Operations Manager - Multiple Vulnerabilities	18 May 201100:00	–	exploitdb
EUVD	EUVD-2011-0972	7 Oct 202500:30	–	euvd
exploitpack	Cisco Unified Operations Manager - Multiple Vulnerabilities	18 May 201100:00	–	exploitpack
NVD	CVE-2011-0960	20 May 201122:55	–	nvd
Packet Storm	Cisco Unified Operations Manager XSS / SQL Injection / Directory Traversal	18 May 201100:00	–	packetstorm
Prion	Sql injection	20 May 201122:55	–	prion

NVD

Node

cisco unified_operations_managerRange≤8.5

cisco unified_operations_managerMatch1.1

cisco unified_operations_managerMatch2.0

cisco unified_operations_managerMatch2.0.1

cisco unified_operations_managerMatch2.0.2

cisco unified_operations_managerMatch2.0.3

cisco unified_operations_managerMatch2.1

cisco unified_operations_managerMatch2.2

cisco unified_operations_managerMatch2.3

cisco unified_operations_managerMatch8.0

Source	Link
exploit-db	www.exploit-db.com/exploits/17304
securityfocus	www.securityfocus.com/bid/47898
senseofsecurity	www.senseofsecurity.com.au/advisories/SOS-11-006.pdf
tools	www.tools.cisco.com/security/center/viewAlert.x
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/67522
archives	www.archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html

Parameter	Position	Path	Description	CWE
CCMs	query param	/iptm/PRTestCreation.do?RequestSource=dashboard&MACs=&CCMs='waitfor%20delay'0:0:20'--&Extns=&IPs=	Blind SQL injection via CCMs parameter in PRTestCreation.do	CWE-89
ccm	query param	/iptm/TelePresenceReportAction.do?ccm='waitfor%20delay'0:0:20'--	Blind SQL injection via ccm parameter in TelePresenceReportAction.do	CWE-89

29 Apr 2026 01:13Current

8.5High risk

Vulners AI Score8.5

CVSS 27.5

EPSS0.00297

CWE-89