CVEvulnerability

CVE-2006-7144

7.5 HIGH Published 2007-03-07 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-03-07
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page.

Affected configurations

• call-center-software call-center-software (<= 0.93)

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html Exploit, Vendor Advisory
http://secunia.com/advisories/22365 Vendor Advisory
http://securityreason.com/securityalert/2389 securityreason.com
http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt Exploit, Vendor Advisory
http://www.securityfocus.com/archive/1/448423/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/20474 Vendor Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html Exploit, Vendor Advisory
http://secunia.com/advisories/22365 Vendor Advisory
http://securityreason.com/securityalert/2389 securityreason.com
http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt Exploit, Vendor Advisory
http://www.securityfocus.com/archive/1/448423/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/20474 Vendor Advisory