Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4634. PoCs published by anonymous.
AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in Cisco Unified CallManager and Unified Communications Manager. It provides multiple proof-of-concept URIs to extract database information, including the logged-in user, database name, and call details.
Description
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.
Exploits (1)
This exploit demonstrates SQL injection vulnerabilities in Cisco Unified CallManager and Unified Communications Manager. It provides multiple proof-of-concept URIs to extract database information, including the logged-in user, database name, and call details.