CVE-2007-5488
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.7%
from disclosure to weaponsame day
Published on NVDOct 17
1st PoCOct 16
Multiple SQL injection vulnerabilities in cdr_addon_mysql in Asterisk-Addons before 1.2.8, and 1.4.x before 1.4.4, allow remote attackers to execute arbitrary SQL commands via the (1) source and (2) destination numbers, and probably (3) SIP URI, when inserting a record.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/30677⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://downloads.digium.com/pub/security/AST-2007-023.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066744.htmlhttp://osvdb.org/37880http://secunia.com/advisories/27278https://exchange.xforce.ibmcloud.com/vulnerabilities/37235http://www.securityfocus.com/bid/26095http://www.securitytracker.com/id?1018824