First published: Tue Feb 23 2010(Updated: )
SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Trixbox | =2.2.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0702 is classified as a high severity SQL injection vulnerability.
To fix CVE-2010-0702, upgrade the Fonality Trixbox software to version 2.2.5 or later.
CVE-2010-0702 is an SQL injection vulnerability.
CVE-2010-0702 affects users of Fonality Trixbox version 2.2.4.
Attackers can execute arbitrary SQL commands by exploiting the CVE-2010-0702 vulnerability.