Description
A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TrueConf | TrueConf Server | 5.2.0.10225 | 5.2.6.10025 |