CVE-2015-1513

SIPhone Enterprise PBX is affected by a SQL injection vulnerability (CVE-2015-1513) where a remote attacker can influence the Username input to execute arbitrary SQL commands. The root cause is an input handling flaw that allows crafted queries to be executed by the underlying database. Reported ...