high7.5Public exploit code
CVE-2015-2866
SQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9 beta allows remote attackers to execute arbitrary SQL commands by…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Grandsteam GXV3611_HD - SQL Injection2016-09-29 · remote · hardware
Impact
SQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9 beta allows remote attackers to execute arbitrary SQL commands by attempting to establish a TELNET session with a crafted username.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grandstream | Gxv3611 Hd Firmware | through 1.0.3.6 |