CVE-2010-0139 Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a...
HighCVSS 9.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified meetingplace | = 5 | No fix listed |
| cisco unified meetingplace | = 5.0 | No fix listed |
| cisco unified meetingplace | = 6.0 | No fix listed |
| cisco unified meetingplace | = 6.0.170.0 | No fix listed |
| cisco unified meetingplace | = 6.0.244 | No fix listed |
| cisco unified meetingplace | = 7.0 | No fix listed |
| cisco unified meetingplace | = 7.0.1 | No fix listed |
| cisco unified meetingplace | = 7.0.2 | No fix listed |
References
- 20100127 Multiple Vulnerabilities in Cisco Unified MeetingPlace patch vendor-advisory
- 37965 vdb-entry