Data Thief: Call Center Employee Pleads Guilty

A Bank of America call center employee has pleaded guilty to charges that he stole sensitive client information and then tried to sell it for cash. Read the full article. IDG News Service...

CVE-2009-2234

CVE-2009-2234 affects VICIdial Call Center Suite (example: 2.0.5-173) with multiple SQL injection vulnerabilities in admin.php. The root cause is unsafe handling of user-supplied input in the PHP_AUTH_USER and PHP_AUTH_PW parameters, allowing remote attackers to execute arbitrary SQL commands. Do...

CVE-2009-2234

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the 1 Username parameter $PHPAUTHUSER and 2 Password parameter $PHPAUTHPW...

CVE-2009-2234: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the 1 Username parameter $PHPAUTHUSER and 2 Password parameter $PHPAUTHPW...

VICIDIAL Call Center Suite Default Administrative Credentials

The remote host is running the VICIDIAL Call Center Suite, a set of programs for Asterisk that act as a complete call center suite. The remote installation of VICIDIAL is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative...

VICIDIAL Call Center Suite admin.php SQL Injection

The remote host is running the VICIDIAL Call Center Suite, a set of programs for Asterisk that act as a complete call center suite. The version of this software installed on the remote host fails to sanitize user-supplied input to the 'PHPAUTHUSER' and 'PHPAUTHPW' variables before using it to...

VICIDIAL 2.0.5-173 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + Type Exploit :VICIDIAL call center suite Admin Bypass SQL Injection Vulnerability + Script Homepage :http://www.vicidial.org + Discovered By Striker7 + Greate : His0k4 , Super Cristal , Yassineenp , Dreadful ,Str0ke, And ALl Hacker MuslimsDz + www.Snakespc.com...

VICIDIAL 2.0.5-173 - Authentication Bypass

VICIDIAL 2.0.5-173 - Authentication Bypass | | | | | | | / - | |// / // || | | \ || |\ | | | \ / + Type Exploit :VICIDIAL call center suite Admin Bypass SQL Injection Vulnerability + Script Homepage :http://www.vicidial.org + Discovered By Striker7 + Greate : His0k4 , Super Cristal , Yassineenp...

VICIDIAL 2.0.5-173 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ VICIDIAL 2.0.5-173 Auth Bypass SQL Injection Vulnerability ============================================================ + Type Exploit :VICIDIAL call center suite Admin Bypass SQ...

VICIDIAL 2.0.5-173 - Authentication Bypass

| | | | | | | / - | |// / // || | | \ || |\ | | | \ / + Type Exploit :VICIDIAL call center suite Admin Bypass SQL Injection Vulnerability + Script Homepage :http://www.vicidial.org + Discovered By Striker7 + Greate : His0k4 , Super Cristal , Yassineenp , Dreadful ,Str0ke, And ALl Hacker...

Cisco Unified Communications管理应用程序特权提升漏洞

Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications管理应用程序包含的基于WEB的工具存在访问验证问题，远程攻击者可以利用漏洞访问设备敏感信息和更改应用程序配置。 Cisco Unified ICME, Unified ICMH, UCCE,...

CVE-2006-7145

edituser.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified userid parameter...

CVE-2006-7143

Cross-site scripting XSS vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field...

CVE-2006-7145

edituser.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified userid parameter...

CVE-2006-7143

The CVE-2006-7143 entry describes a Cross-site Scripting (XSS) vulnerability in Call Center Software versions 0.93 and earlier, exploitable via the problem description field to inject arbitrary script/HTML. The provided sources confirm the affected software and the vulnerability class but do not ...

CVE-2006-7145

CVE-2006-7145 concerns Call Center Software (0.93 and earlier). The vulnerability allows remote attackers to disclose sensitive data (e.g., account passwords) by sending a modified user_id parameter in edit_user.php, leading to partial confidentiality impact and partial integrity impact. The NVD ...

CVE-2006-7143

Cross-site scripting XSS vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field...

CVE-2006-7144

CVE-2006-7144 affects Call Center Software version 0.93 and earlier. The vulnerability is an SQL injection in the login page where the username is used in the authentication query, enabling remote attackers to execute arbitrary SQL commands and bypass authentication. Root cause appears to be impr...

CVE-2006-7144

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page...

CVE-2006-7144: Undefined Security Weakness

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page...