CVE-2014-0729

Cisco’s advisory confirms a Blind SQL Injection in the Enterprise Mobility Application (EMApp) interface of Cisco Unified Communications Manager (UCM). The root cause is a failure to validate user-supplied input used to build SQL queries, enabling an unauthenticated, remote attacker to exfiltrate...

PT-2014-3793

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager UCM affected versions not specified Description A SQL injection issue in the Enterprise Mobility Application EMApp interface allows remote attackers to execute arbitrary SQL commands via a crafted URL...