Sql injection

A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page. A successful exploit could allow an attacker to extract sensitive information from th...

PT-2020-10196

Name of the Vulnerable Software and Affected Versions Mitel MiCollab AWV versions prior to 8.1.2.2 Description A SQL injection issue exists due to insufficient input validation for the "registeredList.cgi" page, allowing an unauthenticated attack. This could enable an attacker to extract sensitiv...

CVE-2019-19608: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page. A successful exploit could allow an attacker to extract sensitive information from th...