← Database

CVE-2022-24628

HIGH CVSS: 7.2 Published: 2023-05-29 Modified: 2026-06-17

Description

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is authenticated SQL injection in the id parameter of IPPhoneFirmwareEdit.php.

Affected Platforms

Audiocodes Device Manager Express

Weakness Type

CWE-89, CWE-89

References