CVE-2026-63315

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63314

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63315

The WebCTI service for Slican IPx telephone exchanges is vulnerable to plaintext storage of temporary subscriber passwords. An attacker who gains access to the database can retrieve these passwords to log into subscriber accounts. This issue is resolved in IPx series version 6.62.0100 . No specif...

EUVD-2026-101952

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63315 Plaintext storage of a password in WebCTI

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63315 Plaintext storage of a password in WebCTI

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63314 SQL Injection in WebCTI

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63314

The WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection due to improper neutralization of input in the /webcti/admin_json.php endpoint. This flaw allows an authenticated attacker to execute SQL Injection attacks. This issue has been addressed in the IPx series version...

CVE-2026-63314 SQL Injection in WebCTI

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

EUVD-2026-101951

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

PT-2026-114862

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

PT-2026-114863

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63314: Improper Neutralization of Special Elements used in an SQL Command

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100...

CVE-2026-63315: Plaintext Storage of a Password

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100...

Slican IPX SQL Injection Vulnerability

Slican versions prior to IPx 6.62.0100 have a SQL injection vulnerability. This vulnerability stems from the WebCTI service’s improper handling of user input in files such as webcti/adminjson.php. This could allow authenticated attackers to execute SQL injection attacks...

Slican IPx Trust Management Vulnerability

Slican versions prior to IPx 6.62.0100 have a trust management vulnerability. This vulnerability stems from the WebCTI service storing temporary subscriber passwords in plaintext, which may allow attackers with database access rights to obtain user passwords and log in to subscriber accounts...

PT-2026-21683

Name of the Vulnerable Software and Affected Versions Slican NCP versions prior to 1.24.0190 Slican IPL/IPM/IPU versions prior to 6.61.0010 Description Slican NCP/IPL/IPM/IPU devices are susceptible to PHP Function Injection. An unauthenticated remote attacker can execute arbitrary PHP commands b...

CVE-2025-14577: Missing Authentication for Critical Function

Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection. An unauthenticated remote attacker is able to execute arbitrary PHP commands by sending specially crafted requests to /webcti/sessionajax.php endpoint. This issue was fixed in version 1.24.0190 Slican NCP and 6.61.0010 Slica...

EUVD-2021-32531

Malicious code in bioql PyPI...

CVE-2021-45813

SLICAN WebCTI 1.01 2015 is affected by a Cross Site Scripting XSS vulnerability. The attacker can steal the user's session by injecting malicious JavaScript codes which leads to Session Hijacking and cause user's credentials theft...