CVE-2014-5109

High

Published: 28/07/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action.

Risk Assessment

Attackers may gain access to the database, potentially leading to the disclosure of sensitive information or data modification.

Recommendation

It is recommended to update the software to the latest version and to validate and sanitize input data to prevent SQL injection attacks.

Other vulnerabilities in Fonality trixbox

CVE-2014-5112High
The home module in Fonality trixbox has a vulnerability that allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter.

Original NVD description (English source)

SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action.