132 matches found
VOIP Dashboard SQL Injection
--------------------------------------------------------------------------------------------- + VOIP Dashboard Auth BypassSQL Injection vulnerability + Found By: Rohit Bansal SCHAP Security http://schap.org + Date: 02-06-2009...
CVE-2007-6170
CVE-2007-6170 affects the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk. The vulnerability arises because ANI and DNIS are not properly escaped before SQL execution, enabling remote authenticated users to inject commands. Affected product versions include Asterisk 1.4.x befor...
Avotus mm File Retrieval attempt
The script attempts to force the remote Avotus CDR mm service to include the file /etc/passwd across the network. OpenVAS Vulnerability Test $Id: avotusmm.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Avotus mm File Retrieval attempt Authors: Anonymous Copyright: Copyright C 2004 Anonymous...
Avotus CDR mm File Retrieval Attempt
The script attempts to force the remote Avotus CDR mm service to include the file /etc/passwd across the network. SPDX-FileCopyrightText: 2004 Anonymous Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
CVE-2005-2211
Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR...
CVE-2005-2211
CVE-2005-2211 affects Backup Manager 0.5.8a, where insecure temporary file creation enables local users to perform unauthorized file operations during CD burning. The description across multiple sources confirms the root cause as insecure handling of temporary files, leading to potential partial ...
CVE-2005-2211
Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR...
Avotus CDR mm Arbitrary File Retrieval
The script attempts to force the remote Avotus CDR mm service to include the file /etc/passwd accross the network. See the Nessus Scripts License for details --------------------------------------------------------------------------- This plugin has not been verified - meaning that there MIGHT be...
[UNIX] Asterisk CallerID CDR SQL Injection
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2003-0779
CVE-2003-0779 corresponds to an SQL injection in the Asterisk Call Detail Record (CDR) logging. A remote attacker can modify the CallerID string to cause arbitrary SQL execution due to unsafe query construction in the CDR logging path. The NVD/metrics indicate a CVSSv2 base score of 7.5 (HIGH) wi...
