Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject a SQL statement through the "Export to CSV" feature of the Contact Manager web GUI.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-10-14T00:00:00
Updated: 2024-08-04T03:30:38.298Z
Reserved: 2021-10-14T00:00:00
Link: CVE-2021-42369
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-10-14T18:15:12.887
Modified: 2023-09-28T14:15:13.777
Link: CVE-2021-42369
Redhat
No data.