Sql injection

2023-12-2508:15:00

PRIOn knowledge base

www.prio-n.com

crm integration

sql injection

first name

search string

email address

vulnerability

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.1%

The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address.

CPENameOperatorVersion
3cxge20.0
3cxlt20.0.0.1494
3cxlt18.0.9.23

Name	Operator	Version
3cx	ge	20.0
3cx	lt	20.0.0.1494
3cx	lt	18.0.9.23

References

cve-2023-49954.github.io/