CVE-2014-5109: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in maint/modules/endpointcfg/endpointgeneric.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action...