high7.5
CVE-2015-1513
SQL injection vulnerability in SIPhone Enterprise PBX allows remote attackers to execute arbitrary SQL commands via the Username.
Impact
SQL injection vulnerability in SIPhone Enterprise PBX allows remote attackers to execute arbitrary SQL commands via the Username.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siphon | Siphone Enterprise Pbx | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/130194/SIPhone-Enterprise-PBX-SQL-Injection.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100582
- http://packetstormsecurity.com/files/130194/SIPhone-Enterprise-PBX-SQL-Injection.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100582