Read the docs

VICIdial

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

VICIdial records in CISA KEV

No VICIdial vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Call Center Suite · all components

Priority LOW 35

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter ($PHP_AUTH_USER) and (2) Password parame…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01027 Published 2009-06-27 No fix listed CWE-89
Open these records in search →