Description
WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks.
This issue was fixed in IPx series version 6.62.0100.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Slican | IPx | < 6.62.0100 | 6.62.0100 |