The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.
CPE | Name | Operator | Version |
---|---|---|---|
mivoice_connect | lt | 19.3 | |
mivoice_connect | eq | 19.3 |