Cisco Unified Communications Manager Unspecified SQL Injection (CSCup88089)

The version of Cisco Unified Communications Manager installed on the remote host is affected by an unspecified SQL injection vulnerability due to a failure to properly sanitize user-supplied input in the administrative web interface. This allows an authenticated, remote attacker to obtain...

CVE-2014-3366

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted response, aka Bug ID CSCup88089...