Sql injection

SQL injection vulnerability in the Interactive Voice Response IVR component in Cisco Unified Communications Manager UCM 10.51.98991.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563...

CVE-2015-0699

CVE-2015-0699 affects Cisco Unified Communications Manager (UCM) IVR interface. A SQL injection exists in the IVR component (UCM 10.5(1.98991.13)) that allows an unauthenticated, remote attacker to execute arbitrary SQL via unspecified vectors, as described in Cisco’s advisory (Bug CSCut21563). T...