Lucene search

K
cveMitreCVE-2015-1513
HistoryFeb 06, 2015 - 3:59 p.m.

CVE-2015-1513

2015-02-0615:59:18
CWE-89
mitre
web.nvd.nist.gov
24
cve
sql injection
siphone enterprise pbx
remote attackers
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.003

Percentile

65.2%

SQL injection vulnerability in SIPhone Enterprise PBX allows remote attackers to execute arbitrary SQL commands via the Username.

Affected configurations

Nvd
Node
siphonsiphone_enterprise_pbxMatch-
VendorProductVersionCPE
siphonsiphone_enterprise_pbx-cpe:2.3:h:siphon:siphone_enterprise_pbx:-:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.003

Percentile

65.2%

Related for CVE-2015-1513