VICIDIAL Call Center Suite Default Administrative Credentials

The remote host is running the VICIDIAL Call Center Suite, a set of programs for Asterisk that act as a complete call center suite. The remote installation of VICIDIAL is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative...

VICIDIAL 2.0.5-173 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + Type Exploit :VICIDIAL call center suite Admin Bypass SQL Injection Vulnerability + Script Homepage :http://www.vicidial.org + Discovered By Striker7 + Greate : His0k4 , Super Cristal , Yassineenp , Dreadful ,Str0ke, And ALl Hacker MuslimsDz + www.Snakespc.com...

VICIDIAL 2.0.5-173 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ VICIDIAL 2.0.5-173 Auth Bypass SQL Injection Vulnerability ============================================================ + Type Exploit :VICIDIAL call center suite Admin Bypass SQ...

VICIDIAL 2.0.5-173 - Authentication Bypass

VICIDIAL 2.0.5-173 - Authentication Bypass | | | | | | | / - | |// / // || | | \ || |\ | | | \ / + Type Exploit :VICIDIAL call center suite Admin Bypass SQL Injection Vulnerability + Script Homepage :http://www.vicidial.org + Discovered By Striker7 + Greate : His0k4 , Super Cristal , Yassineenp...

VICIDIAL 2.0.5-173 - Authentication Bypass

| | | | | | | / - | |// / // || | | \ || |\ | | | \ / + Type Exploit :VICIDIAL call center suite Admin Bypass SQL Injection Vulnerability + Script Homepage :http://www.vicidial.org + Discovered By Striker7 + Greate : His0k4 , Super Cristal , Yassineenp , Dreadful ,Str0ke, And ALl Hacker...

Cisco Unified Communications管理应用程序特权提升漏洞

Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications管理应用程序包含的基于WEB的工具存在访问验证问题，远程攻击者可以利用漏洞访问设备敏感信息和更改应用程序配置。 Cisco Unified ICME, Unified ICMH, UCCE,...

CVE-2006-7143

Cross-site scripting XSS vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field...

CVE-2006-7145

edituser.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified userid parameter...

CVE-2006-7143

The CVE-2006-7143 entry describes a Cross-site Scripting (XSS) vulnerability in Call Center Software versions 0.93 and earlier, exploitable via the problem description field to inject arbitrary script/HTML. The provided sources confirm the affected software and the vulnerability class but do not ...

CVE-2006-7145

edituser.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified userid parameter...

CVE-2006-7144

CVE-2006-7144 affects Call Center Software version 0.93 and earlier. The vulnerability is an SQL injection in the login page where the username is used in the authentication query, enabling remote attackers to execute arbitrary SQL commands and bypass authentication. Root cause appears to be impr...

CVE-2006-7145

CVE-2006-7145 concerns Call Center Software (0.93 and earlier). The vulnerability allows remote attackers to disclose sensitive data (e.g., account passwords) by sending a modified user_id parameter in edit_user.php, leading to partial confidentiality impact and partial integrity impact. The NVD ...

CVE-2006-7143

Cross-site scripting XSS vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field...

CVE-2006-7144

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page...

CVE-2007-1161

Cross-site scripting XSS vulnerability in callentry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problemdesc parameter, as demonstrated by the ONLOAD attribute of a BODY element...

Cross site scripting

Cross-site scripting XSS vulnerability in callentry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problemdesc parameter, as demonstrated by the ONLOAD attribute of a BODY element...

CVE-2007-1161

Cross-site scripting XSS vulnerability in callentry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problemdesc parameter, as demonstrated by the ONLOAD attribute of a BODY element...

CVE-2007-1161

CVE-2007-1161 is a documented cross-site scripting (XSS) vulnerability in Call Center Software 0,93, exposed via call_entry.php where the problem_desc parameter can be exploited to inject HTML/JS (e.g., ONLOAD on BODY). The issue is triggered by improper handling of user-supplied data, enabling r...

CVE-2007-1161

Cross-site scripting XSS vulnerability in callentry.php in Call Center Software 0,93 allows remote attackers to inject arbitrary web script or HTML via the problemdesc parameter, as demonstrated by the ONLOAD attribute of a BODY element...

ccs-xss.txt

-=--------------------ADVISORY-------------------=- Call center 0,93 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Call senter -=+ Version: 0,93 -=+ Vendor's URL: http://www.call-center-software.org/ -=+ Platform: Windows\Linux\Unix -=+ Bug...