CVE-2013-4467

Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allow (1)…

published March 11, 2014

CVSS

—

EPSS

31%

Percentile

98.3

In the wild

Unconfirmed

What it is

Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allow (1) remote attackers to execute arbitrary SQL commands via the campaign variable in SCRIPT_multirecording_AJAX.php, (2) remote authenticated users to execute arbitrary SQL commands via the server_ip parameter to manager_send.php, or (3) other unspecified vectors. NOTE: some of these details are obtained from third party information.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.31393 · 98.3th percentile
Published: 2014-03-11T15:00Z

EPSS history

Timeline

11 MAR 15:00Z
Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allow (1)…
cvelistv5