CVE-2011-0960 Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation....
HighCVSS 7.5
EPSS 3.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified operations manager | <= 8.5 | No fix listed |
| cisco unified operations manager | = 1.1 | No fix listed |
| cisco unified operations manager | = 2.0 | No fix listed |
| cisco unified operations manager | = 2.0.1 | No fix listed |
| cisco unified operations manager | = 2.0.2 | No fix listed |
| cisco unified operations manager | = 2.0.3 | No fix listed |
| cisco unified operations manager | = 2.1 | No fix listed |
| cisco unified operations manager | = 2.2 | No fix listed |
| cisco unified operations manager | = 2.3 | No fix listed |
| cisco unified operations manager | = 8.0 | No fix listed |
References
- 20110518 Cisco Unified Operations Manager Multiple Vulnerabilities - SOS-11-006 exploit mailing-list
- tools.cisco.com vendor-advisory
- 17304 exploit
- 47898 vdb-entry
- www.senseofsecurity.com.au exploit url-repurposed
- cuom-prtestcreation-sql-injection(67522) vdb-entry