CVE-2026-63315

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63314

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

EUVD-2026-101952

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63315

The WebCTI service for Slican IPx telephone exchanges is vulnerable to plaintext storage of temporary subscriber passwords. An attacker who gains access to the database can retrieve these passwords to log into subscriber accounts. This issue is resolved in IPx series version 6.62.0100 . No specif...

CVE-2026-63315 Plaintext storage of a password in WebCTI

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63315 Plaintext storage of a password in WebCTI

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63314 SQL Injection in WebCTI

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63314

The WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection due to improper neutralization of input in the /webcti/admin_json.php endpoint. This flaw allows an authenticated attacker to execute SQL Injection attacks. This issue has been addressed in the IPx series version...

CVE-2026-63314 SQL Injection in WebCTI

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

EUVD-2026-101951

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

PT-2026-114862

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63314: Improper Neutralization of Special Elements used in an SQL Command

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

PT-2026-114863

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63315: Plaintext Storage of a Password

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

Slican IPX SQL Injection Vulnerability

Slican versions prior to IPx 6.62.0100 have a SQL injection vulnerability. This vulnerability stems from the WebCTI service’s improper handling of user input in files such as webcti/adminjson.php. This could allow authenticated attackers to execute SQL injection attacks...

Slican IPx Trust Management Vulnerability

Slican versions prior to IPx 6.62.0100 have a trust management vulnerability. This vulnerability stems from the WebCTI service storing temporary subscriber passwords in plaintext, which may allow attackers with database access rights to obtain user passwords and log in to subscriber accounts...

Slican’s various products have security vulnerabilities

Slican IPx, among others, are products of the Polish company Slican. Slican IPx is a series of enterprise communication and IP phone switching systems. Slican CCT is also a series of enterprise communication and IP phone switching systems. Slican MAC is a series of enterprise-level telephone...