Nom de la faiblesse | Source | |
---|---|---|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
Métriques | Score | Gravité | CVSS Vecteur | Source |
---|---|---|---|---|
V2 | 8.5 | AV:N/AC:M/Au:S/C:C/I:C/A:C | nvd@nist.gov |
Date de publication : 2011-04-26 22h00 +00:00
Auteur : Alberto Revelli
EDB Vérifié : Yes
Cisco>>Unified_communications_manager >> Version 6.0
Cisco>>Unified_communications_manager >> Version 6.1\(1\)
Cisco>>Unified_communications_manager >> Version 6.1\(1a\)
Cisco>>Unified_communications_manager >> Version 6.1\(1b\)
Cisco>>Unified_communications_manager >> Version 6.1\(2\)
Cisco>>Unified_communications_manager >> Version 6.1\(2\)su1
Cisco>>Unified_communications_manager >> Version 6.1\(2\)su1a
Cisco>>Unified_communications_manager >> Version 6.1\(3\)
Cisco>>Unified_communications_manager >> Version 6.1\(3a\)
Cisco>>Unified_communications_manager >> Version 6.1\(3b\)
Cisco>>Unified_communications_manager >> Version 6.1\(3b\)su1
Cisco>>Unified_communications_manager >> Version 6.1\(4\)
Cisco>>Unified_communications_manager >> Version 6.1\(4\)su1
Cisco>>Unified_communications_manager >> Version 6.1\(4a\)
Cisco>>Unified_communications_manager >> Version 6.1\(4a\)su2
Cisco>>Unified_communications_manager >> Version 6.1\(5\)
Cisco>>Unified_communications_manager >> Version 6.1\(5\)su1
Cisco>>Unified_communications_manager >> Version 7.0\(1\)su1
Cisco>>Unified_communications_manager >> Version 7.0\(1\)su1a
Cisco>>Unified_communications_manager >> Version 7.0\(2\)
Cisco>>Unified_communications_manager >> Version 7.0\(2a\)
Cisco>>Unified_communications_manager >> Version 7.0\(2a\)su1
Cisco>>Unified_communications_manager >> Version 7.0\(2a\)su2
Cisco>>Unified_communications_manager >> Version 7.1\(2a\)
Cisco>>Unified_communications_manager >> Version 7.1\(2a\)su1
Cisco>>Unified_communications_manager >> Version 7.1\(2b\)
Cisco>>Unified_communications_manager >> Version 7.1\(3\)
Cisco>>Unified_communications_manager >> Version 7.1\(3a\)
Cisco>>Unified_communications_manager >> Version 7.1\(3a\)su1
Cisco>>Unified_communications_manager >> Version 7.1\(3a\)su1a
Cisco>>Unified_communications_manager >> Version 7.1\(3b\)
Cisco>>Unified_communications_manager >> Version 7.1\(3b\)su1
Cisco>>Unified_communications_manager >> Version 7.1\(3b\)su2
Cisco>>Unified_communications_manager >> Version 7.1\(5\)
Cisco>>Unified_communications_manager >> Version 7.1\(5\)su1
Cisco>>Unified_communications_manager >> Version 7.1\(5\)su1a
Cisco>>Unified_communications_manager >> Version 7.1\(5a\)
Cisco>>Unified_communications_manager >> Version 7.1\(5b\)
Cisco>>Unified_communications_manager >> Version 8.0\(2c\)
Cisco>>Unified_communications_manager >> Version 8.0\(2c\)su1
Cisco>>Unified_communications_manager >> Version 8.0\(3\)
Cisco>>Unified_communications_manager >> Version 8.0\(3a\)
Cisco>>Unified_communications_manager >> Version 8.0\(3a\)su1
Cisco>>Unified_communications_manager >> Version 8.0\(3a\)su2
Cisco>>Unified_communications_manager >> Version 8.5