Skip to content
OpenAdvisories

Vendor

VICIdial

7 known vulnerabilities.

Products

VICIdial 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-34099 Public exploit

    VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

    An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through 2.13 RC1, within the vicidial_sales_viewer.php component when password encryption is enabled (a non-default configuration). The application improperly passes the HT…

    VICIdial VICIdial
  • Critical 9.8
    CVE-2024-8503 Public exploit Scanner template EPSS 79%

    VICIdial Unauthenticated SQL Injection

    An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database.

    VICIdial VICIdial