Unscored CVE-2013-6983 EUVD-2013-6784GHSA-jh63-rqqj-qxmm

SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQ…

Published Dec 31, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh35615.

References

20131229 Cisco Unified Presence Server SQL Injection Vulnerability vendor-advisory
56273 third-party-advisory
1029547 vdb-entry
cisco-unified-cve20136983-sql-injection(90011) vdb-entry
64551 vdb-entry
101514 vdb-entry