EUVD-2019-2463

Malware in sbrugna...

Grandstream IP PBX Appliance UCM6204 < 1.0.19.20 RCE

Binary data 700492.prm...

Sql injection

Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi? URI...

CVE-2019-10663

Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi? URI...

CVE-2019-10663

Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi? URI...

PT-2019-11976

Name of the Vulnerable Software and Affected Versions Grandstream UCM6204 versions prior to 1.0.19.20 Description The issue allows remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the "/cgi?" URI. Recommendations For versions...

CVE-2019-10663: Improper Neutralization of Special Elements used in an SQL Command

Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi? URI...