6 matches found
CVE-2026-36670
CVE-2026-36670 أداة استغلال لحقن SQL الأعمى المستند إلى الوقت للوحة تحكم OpenSIPS Control Panel. يستغل هذا الاستغلال ثغرة حقن SQL بعد المصادقة داخل وحدة aliasmanagement.php في opensips. لا يتم تعقيم معامل GET المسمى table بشكل صحيح، مما يسمح للمهاجم بحقن حمولة جدول مشتقة مصممة خصيصًا. المتطلبات...
EUVD-2026-36748
A Time-Based Blind SQL Injection vulnerability in the aliasmanagement module of OpenSIPS Control Panel opensips-cp prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in aliasmanagement.php...
CVE-2026-36670
A Time-Based Blind SQL Injection vulnerability in the aliasmanagement module of OpenSIPS Control Panel opensips-cp prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in aliasmanagement.php...
CVE-2026-36670
CVE-2026-36670: Time-based blind SQL injection in the OpenSIPS Control Panel (opensips-cp) alias_management module before version 9.3.3. Authenticated attackers can leverage the table parameter in alias_management.php to execute arbitrary SQL. Connected sources confirm the affected component is O...
PT-2026-49288
Name of the Vulnerable Software and Affected Versions OpenSIPS Control Panel versions prior to 9.3.3 Description A Time-Based Blind SQL Injection in the alias management module allows authenticated attackers to execute arbitrary SQL commands. This occurs via the 'table' GET parameter in the 'alia...
