Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-6919 EUVD-2024-47906GHSA-5jh6-g6wh-386v

SQLi in NAC Telecommunication's NACPremium

Published Sep 2, 2024 · Updated Jun 3, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection.

This issue affects NACPremium: through 01082024.

Affected products

VendorProductAffectedFixed
NAC Telecommunication Systems NACPremium ≤ 01082024 —

References