Cisco Unified Communications Manager SQL Injection

[newsbot]

Cisco Unified Communications Manager is vulnerable to a SQL Injection attack in the parameter key of the admin and user interface pages. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database.

http://www.securiteam.com/securitynews/5BP0D20NFA.html