Unscored CVE-2006-7144 EUVD-2006-7126GHSA-hh6m-jqx8-5f79

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass a…

Published Mar 7, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page.

References

20061012 MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues mailing-list
20061011 MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues mailing-list
2389 third-party-advisory
http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt
22365 third-party-advisory
20474 vdb-entry