Cisco Unified Communications Manager SQL Injection (CSCut33447 / CSCut33608)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device is affected by multiple SQL injection vulnerabilities due to improper validation of user-supplied input. An authenticated, remote attacker can exploit these issues to inject or modify SQL queries,...

CVE-2015-0715

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608...

CVE-2015-0715

Cisco CUCM 11.0(0.98000.225) is impacted by CVE-2015-0715, a SQL injection in the administrative web interface. An authenticated, remote attacker can exploit improper input validation to inject or modify SQL queries, potentially exposing or manipulating data via vectors not fully specified in the...