Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-85094
HistoryApr 19, 2022 - 12:00 a.m.

Asterisk SQL Injection Vulnerability

2022-04-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
14

0.008 Low

EPSS

Percentile

81.8%

Asterisk is a PBX system software that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols.Asterisk suffers from a SQL injection vulnerability that can be exploited by attackers to cause user-supplied data to create corrupt SQL queries or possibly SQL injections.