Lucene search
CiscoCVE-2008-0026HistoryFeb 14, 2008 - 12:00 p.m.
CVE-2008-0026
2008-02-1412:00:00
CWE-89
cisco
web.nvd.nist.gov
26
cve-2008-0026
sql injection
cisco
unified callmanager
communications manager
cucm
remote authenticated users
arbitrary sql commands
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.002
Percentile
53.4%
SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages.
Affected configurations
Node
ciscounified_callmanagerMatch5.0
ORciscounified_callmanagerMatch5.0\(1\)
ORciscounified_callmanagerMatch5.0\(2\)
ORciscounified_callmanagerMatch5.0\(3\)
ORciscounified_callmanagerMatch5.0\(3a\)
ORciscounified_callmanagerMatch5.0\(4\)
ORciscounified_callmanagerMatch5.0_4a
ORciscounified_callmanagerMatch5.1
ORciscounified_callmanagerMatch6.0
ORciscounified_communications_managerMatch5.0
ORciscounified_communications_managerMatch5.0_1
ORciscounified_communications_managerMatch5.0_2
ORciscounified_communications_managerMatch5.0_3
ORciscounified_communications_managerMatch5.0_3a
ORciscounified_communications_managerMatch5.0_4
ORciscounified_communications_managerMatch5.0_4a
ORciscounified_communications_managerMatch5.0_4a_su1
ORciscounified_communications_managerMatch6.0
ORciscounified_communications_managerMatch6.0_1
ORciscounified_communications_managerMatch6.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_callmanager | 5.0 | cpe:2.3:a:cisco:unified_callmanager:5.0:*:*:*:*:*:*:* |
| cisco | unified_callmanager | 5.0(1) | cpe:2.3:a:cisco:unified_callmanager:5.0\(1\):*:*:*:*:*:*:* |
| cisco | unified_callmanager | 5.0(2) | cpe:2.3:a:cisco:unified_callmanager:5.0\(2\):*:*:*:*:*:*:* |
| cisco | unified_callmanager | 5.0(3) | cpe:2.3:a:cisco:unified_callmanager:5.0\(3\):*:*:*:*:*:*:* |
| cisco | unified_callmanager | 5.0(3a) | cpe:2.3:a:cisco:unified_callmanager:5.0\(3a\):*:*:*:*:*:*:* |
| cisco | unified_callmanager | 5.0(4) | cpe:2.3:a:cisco:unified_callmanager:5.0\(4\):*:*:*:*:*:*:* |
| cisco | unified_callmanager | 5.0_4a | cpe:2.3:a:cisco:unified_callmanager:5.0_4a:*:*:*:*:*:*:* |
| cisco | unified_callmanager | 5.1 | cpe:2.3:a:cisco:unified_callmanager:5.1:*:*:*:*:*:*:* |
| cisco | unified_callmanager | 6.0 | cpe:2.3:a:cisco:unified_callmanager:6.0:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 5.0 | cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2008-0026
2008-02-14 11:00:00
cisco
cisco
SQL injection in Cisco Unified Communications Manager
2008-02-13 16:00:00
prion
prion
Sql injection
2008-02-14 12:00:00
exploitdb
exploitdb
Cisco Unified Communications Manager 6.1 - 'key' SQL Injection
2008-02-13 00:00:00
nvd
nvd
CVE-2008-0026
2008-02-14 12:00:00
seebug
seebug
Cisco Unified Communications Manager key参数SQL注入漏洞
2008-02-20 00:00:00
securityvulns
securityvulns
packetstorm
packetstorm
CiscoCallManager_sql_07_016.txt
2008-02-22 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.002
Percentile
53.4%
Related for CVE-2008-0026