← Database

CVE-2008-0026

MEDIUM CVSS: 6.5 Published: 2008-02-14 Modified: 2026-06-16

Description

SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages.

Affected Platforms

Cisco Unified Communications ManagerCisco Unified Callmanager

Weakness Type

CWE-89

References