TI-2013-06185 CVE-2013-10043 · GHSA-v9m4-r43p-9696
Astium VOIP PBX <= 2.1 SQL Injection File Upload RCE
Priority HIGH 76
A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authentication via SQL injection.