Vulnerabilities

TI-2019-09193 CVE-2019-12328 · GHSA-hrcx-g752-fgp2

A command injection (missing input validation) issue in the remote phonebook…

MEDIUM 46

A command injection (missing input validation) issue in the remote phonebook configuration URI in the web interface of the Atcom A10W VoIP phone with firmware 2.6.1a2421 allows an authenticated remote attacker in the sam…

CVSS 3.0CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.04206 Published 2019-07-22 No fix listed CWE-78

TI-2014-01837 CVE-2014-2318 · GHSA-9qm6-75f7-43r9

SQL injection vulnerability in ATCOM Netvolution 3 allows remote attackers to execute…

LOW 37

SQL injection vulnerability in ATCOM Netvolution 3 allows remote attackers to execute arbitrary SQL commands via the m parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02067 Published 2014-03-10 No fix listed CWE-89

TI-2011-02950 CVE-2011-3340 · GHSA-wq9h-f2pm-3cx5

SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to…

LOW 37

SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01994 Published 2011-10-21 No fix listed CWE-89

TI-2010-04690 CVE-2010-4967 · GHSA-4qhx-qrcw-q3px

SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote…

LOW 37

SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02041 Published 2011-10-21 No fix listed CWE-89

TI-2010-04689 CVE-2010-4966 · GHSA-v69m-qrr6-5g39

Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows…

LOW 23

Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01458 Published 2011-10-21 No fix listed CWE-79

TI-2009-04855 CVE-2009-5103 · GHSA-65jr-xp2m-mpxq

Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote…

LOW 25

Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02557 Published 2011-10-21 No fix listed CWE-79

TI-2009-04854 CVE-2009-5102 · GHSA-5jf7-29p2-6rfv

SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote…

LOW 37

SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpe_nid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02216 Published 2011-10-21 No fix listed CWE-89

Vulnerabilities

Filters

A command injection (missing input validation) issue in the remote phonebook…

SQL injection vulnerability in ATCOM Netvolution 3 allows remote attackers to execute…

SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to…

SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote…

Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows…

Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote…

SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote…