PT-2015-5481

Name of the Vulnerable Software and Affected Versions Elastix versions 2.5.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the transactionID parameter in the /a2billing/customer/iridium threed.php endpoint. Recommendations For...