high7.5
CVE-2003-0779
SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID …
Impact
SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digium | Asterisk | Versions 0.1.7, 0.1.8, 0.1.9, 0.1.9.1, 0.2, 0.3 |