Sql injection

2015-03-1114:59:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.8%

JSON

SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter.

CPENameOperatorVersion
elastixle2.5.0

CPE	Name	Operator	Version
	elastix	le	2.5.0

References

packetstormsecurity.com/files/130698/Elastix-2.5.0-SQL-Injection.html

www.exploit-db.com/exploits/36305/