VICIdial Manager Send OS Command Injection

The file agc/managersend.php in the VICIdial web application uses unsanitized user input as part of a command that is executed using the PHP passthru function. A valid username, password and session are needed to access the injection point. Fortunately, VICIdial has two built-in accounts with...

VICIDIAL Call Center Suite 2.2.1-237 SQL Injection / Cross Site Scripting

...:::::VICIDIAL call center suite Blind SQL Injection Vulnerability::::.... Sepahan TelCom IT Group septelcom ------------------------------------------------------- Date: 2012-09-07 Exploit Author: Sepahan TelCom IT Group septelcom Vendor Homepage: http://www.vicidial.org Software Link:...

VICIDIAL Call Center Suite <= 2.2.1-237 Multiple Vulnerabilities

Exploit for php platform in category web applications ...:::::VICIDIAL call center suite Blind SQL Injection Vulnerability::::.... Sepahan TelCom IT Group septelcom ------------------------------------------------------- Date: 2012-09-07 Exploit Author: Sepahan TelCom IT Group septelcom Vendor...

VICIDIAL Call Center Suite 2.2.1-237 - Multiple Vulnerabilities

VICIDIAL Call Center Suite 2.2.1-237 - Multiple Vulnerabilities ...:::::VICIDIAL call center suite Blind SQL Injection Vulnerability::::.... Sepahan TelCom IT Group septelcom ------------------------------------------------------- Date: 2012-09-07 Exploit Author: Sepahan TelCom IT Group septelcom...

VICIDIAL Call Center Suite - Multiple SQL Injections

VICIDIAL Call Center Suite - Multiple SQL Injections source: https://www.securityfocus.com/bid/55476/info VICIDIAL Call Center Suite is prone to multiple SQL-injection vulnerabilities and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploitin...

VICIDIAL Call Center Suite - Multiple SQL Injections

source: https://www.securityfocus.com/bid/55476/info VICIDIAL Call Center Suite is prone to multiple SQL-injection vulnerabilities and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to...

VICIDIAL Call Center Suite 2.2.1-237 - Multiple Vulnerabilities

...:::::VICIDIAL call center suite Blind SQL Injection Vulnerability::::.... Sepahan TelCom IT Group septelcom ------------------------------------------------------- Date: 2012-09-07 Exploit Author: Sepahan TelCom IT Group septelcom Vendor Homepage: http://www.vicidial.org Software Link:...

VICIdial Multiple SQLi Vulnerabilities (CVE-2009-2234)

VICIdial is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2009-2234

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the 1 Username parameter $PHPAUTHUSER and 2 Password parameter $PHPAUTHPW...

Sql injection

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the 1 Username parameter $PHPAUTHUSER and 2 Password parameter $PHPAUTHPW...

CVE-2009-2234

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the 1 Username parameter $PHPAUTHUSER and 2 Password parameter $PHPAUTHPW...

CVE-2009-2234

CVE-2009-2234 affects VICIdial Call Center Suite (example: 2.0.5-173) with multiple SQL injection vulnerabilities in admin.php. The root cause is unsafe handling of user-supplied input in the PHP_AUTH_USER and PHP_AUTH_PW parameters, allowing remote attackers to execute arbitrary SQL commands. Do...

CVE-2009-2234: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the 1 Username parameter $PHPAUTHUSER and 2 Password parameter $PHPAUTHPW...

VICIDIAL Call Center Suite Default Administrative Credentials

The remote host is running the VICIDIAL Call Center Suite, a set of programs for Asterisk that act as a complete call center suite. The remote installation of VICIDIAL is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative...

VICIDIAL Call Center Suite admin.php SQL Injection

The remote host is running the VICIDIAL Call Center Suite, a set of programs for Asterisk that act as a complete call center suite. The version of this software installed on the remote host fails to sanitize user-supplied input to the 'PHPAUTHUSER' and 'PHPAUTHPW' variables before using it to...

VICIDIAL 2.0.5-173 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + Type Exploit :VICIDIAL call center suite Admin Bypass SQL Injection Vulnerability + Script Homepage :http://www.vicidial.org + Discovered By Striker7 + Greate : His0k4 , Super Cristal , Yassineenp , Dreadful ,Str0ke, And ALl Hacker MuslimsDz + www.Snakespc.com...

Vicidial Call Center SQL Injection

| | | | | | | / - | |// / // || | | \ || |\ | | | \ / + Type Exploit :VICIDIAL call center suite Admin Bypass SQL Injection Vulnerability + Script Homepage :http://www.vicidial.org + Discovered By Striker7 + Greate : His0k4 , Super Cristal , Yassineenp , Dreadful ,Str0ke, And ALl Hacker...

VICIDIAL 2.0.5-173 - Authentication Bypass

VICIDIAL 2.0.5-173 - Authentication Bypass | | | | | | | / - | |// / // || | | \ || |\ | | | \ / + Type Exploit :VICIDIAL call center suite Admin Bypass SQL Injection Vulnerability + Script Homepage :http://www.vicidial.org + Discovered By Striker7 + Greate : His0k4 , Super Cristal , Yassineenp...

VICIDIAL 2.0.5-173 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ VICIDIAL 2.0.5-173 Auth Bypass SQL Injection Vulnerability ============================================================ + Type Exploit :VICIDIAL call center suite Admin Bypass SQ...

VICIDIAL 2.0.5-173 - Authentication Bypass

| | | | | | | / - | |// / // || | | \ || |\ | | | \ / + Type Exploit :VICIDIAL call center suite Admin Bypass SQL Injection Vulnerability + Script Homepage :http://www.vicidial.org + Discovered By Striker7 + Greate : His0k4 , Super Cristal , Yassineenp , Dreadful ,Str0ke, And ALl Hacker...