NVD Vulnerability Detail
Search Exploit, PoC
CVE-2008-0026
Summary

SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages.

Publication Date Feb. 14, 2008, 9 p.m.
Registration Date Jan. 29, 2021, 1:29 p.m.
Last Update Aug. 8, 2017, 10:29 a.m.
CVSS2.0 : MEDIUM
Score 6.5
Vector AV:N/AC:L/Au:S/C:P/I:P/A:P
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 低
攻撃前の認証要否(Au) 単一
機密性への影響(C) 低
完全性への影響(I) 低
可用性への影響(A) 低
Get all privileges. いいえ
Get user privileges いいえ
Get other privileges はい
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:cisco:unified_callmanager:5.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_callmanager:5.0\(1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_callmanager:5.0\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_callmanager:5.0\(3\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_callmanager:5.0\(3a\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_callmanager:5.0\(4\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_callmanager:5.0_4a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_callmanager:5.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_callmanager:6.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_3a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_4a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_4a_su1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.0_1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List