Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi? URI.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-03-30T16:43:52

Updated: 2024-08-04T22:32:01.039Z

Reserved: 2019-03-30T00:00:00

Link: CVE-2019-10663

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-03-30T17:29:00.713

Modified: 2024-11-21T04:19:42.323

Link: CVE-2019-10663

cve-icon Redhat

No data.