EUVD-2010-1597

Malware in sbrugna...

CVE-2020-5726

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords...

CVE-2020-5726

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords...

Sql injection

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords...

CVE-2020-5726

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords...

CVE-2020-5726

CVE-2020-5726 affects the Grandstream UCM6200 series prior to 1.0.20.22. A SQL injection via the CTI server on port 8888 allows a remote, unauthenticated attacker to disclose user passwords by crafting a username. Remedy: upgrade to version 1.0.20.22 or later.

CVE-2020-5726

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords...

PT-2020-18649

Name of the Vulnerable Software and Affected Versions Grandstream UCM6200 series versions prior to 1.0.20.22 Description The issue allows a remote unauthenticated attacker to perform an SQL injection via the CTI server on port 8888. This can be achieved by invoking the challenge action with a...

CVE-2020-5726: Improper Neutralization of Special Elements used in an SQL Command

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords...

CVE-2010-1570

The computer telephony integration CTI server component in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, 6.0 before 6.01SR1, and 5.0 before 5.02SR3 allows remote attackers to cause a denial of service CTI server and Node Manager failure via a malformed CTI message...

Design/Logic Flaw

The computer telephony integration CTI server component in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, 6.0 before 6.01SR1, and 5.0 before 5.02SR3 allows remote attackers to cause a denial of service CTI server and Node Manager failure via a malformed CTI message...

CVE-2010-1570

The computer telephony integration CTI server component in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, 6.0 before 6.01SR1, and 5.0 before 5.02SR3 allows remote attackers to cause a denial of service CTI server and Node Manager failure via a malformed CTI message...

CVE-2010-1570

Cisco UCCX CTI server DoS vulnerability (CVE-2010-1570) affects CTI server in UCCX 7.0 (before 7.0(1)SR4 and 7.0(2)), 6.0 (before 6.0(1)SR1), and 5.0 (before 5.0(2)SR3). A malformed CTI message triggers the CTI server and Node Manager to fail, logging out all active agents and causing temporary s...

CVE-2010-1570: Undefined Security Weakness

The computer telephony integration CTI server component in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, 6.0 before 6.01SR1, and 5.0 before 5.02SR3 allows remote attackers to cause a denial of service CTI server and Node Manager failure via a malformed CTI message...