CVE-2014-5109

SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action.

Affected products

Trixbox

Netfortris Trixbox

All versions

CVSS 2.0

7.5 HIGH

EPSS

3.4% (88th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2014-07-28