CVE-2018-17562

Multi-Tech FaxFinder before 5.1.6 has SQL Injection via a status/calldetails?oid= URI, allowing an attacker to extract the underlying database schema to further disclose other fax server information through different injection points...

PT-2018-14056

Name of the Vulnerable Software and Affected Versions Multi-Tech FaxFinder versions prior to 5.1.6 Description The issue allows an attacker to perform SQL Injection via the "status/call details?oid=" URI, enabling them to extract the underlying database schema and potentially disclose other fax...