CVE-2008-6573

CVE-2008-6573 affects Avaya SIP Enablement Services (SES) embedded in Avaya Communication Manager 3.x, 4.0, and 5.0. The vulnerability is described as multiple SQL injection issues exploitable via the web-based SPIM profile management interface and via permissions for SPIM profiles, as well as th...