Vulnerabilities

TI-2006-06886 CVE-2006-7145 · GHSA-g2hf-mvh6-mg3w

edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain…

LOW 27

edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified user_id parameter.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01312 Published 2007-03-07 No fix listed

TI-2006-06885 CVE-2006-7144 · GHSA-hh6m-jqx8-5f79

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote…

LOW 36

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01461 Published 2007-03-07 No fix listed

TI-2006-06884 CVE-2006-7143 · GHSA-jh7c-5vfc-5x45

Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows…

LOW 29

Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01371 Published 2007-03-07 No fix listed

Vulnerabilities

Filters

edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain…

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote…

Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows…