CVE-2023-39292

Vulnerability summary (CVE-2023-39292): In MiVoice Office 400 SMB Controller, SQL Injection affects versions up to and including 1.2.5.23. The issue could allow an attacker to access sensitive data and perform arbitrary database/management operations. Root cause: SQL injection in the controller’s...

CVE-2023-39293

The CVE-2023-39293 entry concerns a Command Injection vulnerability in Mitel MiVoice Office 400 SMB Controller (affected up to version 1.2.5.23). Exploitation could allow an attacker to execute arbitrary commands in the system context via network access (no user interaction). Public disclosures a...

CVE-2018-16226

Affected product: Mitel MiVoice Office 400 web admin component. Vulnerability: reflected cross-site scripting (XSS) due to insufficient validation on the start.asp page in versions R5.0 HF3 (v8839a1) and earlier. Impact: unauthenticated attacker could execute arbitrary scripts and access sensitiv...