CVE-2014-3339: SQL Injection

First published: Tue Aug 12 2014(Updated: )

Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users to execute arbitrary SQL commands via crafted input to unspecified pages, aka Bug ID CSCup74290.

Credit: ykramarz@cisco.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/author
• agent/references
• agent/weakness
• agent/severity
• agent/description
• agent/type
• agent/last-modified-date
• agent/event
• agent/tags
• agent/softwarecombine
• agent/first-publish-date
• collector/mitre-cve
• source/MITRE
• vendor/cisco
• canonical/cisco unified communications domain manager
• canonical/cisco unified presence server