NetSight
IP …
medium6.5Public exploit code

CVE-2008-0026

SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenti…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages.

Affected products

VendorProductAffected versions
CiscoUnified Callmanager
Versions 5.0, 5.0\(1\), 5.0\(2\), 5.0\(3\), 5.0\(3a\), 5.0\(4\)
CiscoUnified Communications Manager
Versions 5.0, 5.0_1, 5.0_2, 5.0_3, 5.0_3a, 5.0_4

Weakness classification

CWE-89

References