Description
This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zenitel | ICX500 | <1.4.3.3 | — |
| Zenitel | ICX510 | <1.4.3.3 | — |
References
- Zenitel Security Advisory vendor-advisory