CVE-2013-10003

MEDIUM

Telecomsoftware SAMwin Contact Center Suite 5.1 - SQL Injection in getCurrentDBVersion Function

Title source: llm
STIX 2.1

Description

A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1. This affects the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the database handler. The manipulation leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://vuldb.com/?id.12789

Scores

CVSS v3 6.5
EPSS 0.0093
EPSS Percentile 57.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-89
Status published
Products (2)
telecomsoftware/samwin_agent 5.01.19.06
telecomsoftware/samwin_contact_center 5.1
Published May 24, 2022
Tracked Since Feb 18, 2026