Posted by ZDI Disclosures on Apr 28
ZDI-11-143(formerly ZDI-CAN-965): Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-11-143
April 28, 2011
— CVE ID:
CVE-2011-1610
— CVSS:
7.5, (AV:N/AC:L/Au:N/C:P/I:P/A:P)
— Affected Vendors:
Cisco
— Affected Products:
Cisco Cisco Call Manager
— TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by…
Source: ZDI-11-143: Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability
