Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

S-189: SQL Injectionin Cisco Unified Communications Manager

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-189: SQL Injectionin Cisco Unified Communications Manager
# 1  
Old 02-15-2008
S-189: SQL Injectionin Cisco Unified Communications Manager
Cisco Unified Communications Manager is vulnerable to a SQL Injection attack in the parameter key of the admin and user interface pages. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database. The risk is LOW. An authenticated attacker may be able to exploit this vulnerability to extract records from the Cisco Unified Communications Manager database. A successful attack might retrieve sensitive data such as user names, passwords hashes, and information from call records. An attacker cannot use this vulnerability to alter or delete call record information from the database.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

sql::reservedwords

SQL::ReservedWords(3pm) 				User Contributed Perl Documentation				   SQL::ReservedWords(3pm)

NAME

       SQL::ReservedWords - Reserved SQL words by ANSI/ISO

SYNOPSIS

	  if ( SQL::ReservedWords->is_reserved( $word ) ) {
	      print "$word is a reserved SQL word!";
	  }

DESCRIPTION

       Determine if words are reserved by ANSI/ISO SQL standard.

METHODS

       is_reserved( $word )
	   Returns a boolean indicating if $word is reserved by either "SQL:1992", "SQL:1999" or "SQL:2003".

       is_reserved_by_sql1992( $word )
	   Returns a boolean indicating if $word is reserved by "SQL:1992".

       is_reserved_by_sql1999( $word )
	   Returns a boolean indicating if $word is reserved by "SQL:1999".

       is_reserved_by_sql2003( $word )
	   Returns a boolean indicating if $word is reserved by "SQL:2003".

       reserved_by( $word )
	   Returns a list with SQL standards that reserves $word.

       words
	   Returns a list with all reserved words.

EXPORTS

       Nothing by default. Following subroutines can be exported:

       is_reserved
       is_reserved_by_sql1992
       is_reserved_by_sql1999
       is_reserved_by_sql2003
       reserved_by
       words

SEE ALSO

       SQL::ReservedWords::DB2

       SQL::ReservedWords::MySQL

       SQL::ReservedWords::ODBC

       SQL::ReservedWords::Oracle

       SQL::ReservedWords::PostgreSQL

       SQL::ReservedWords::SQLite

       SQL::ReservedWords::SQLServer

       ISO/IEC 9075:1992 Database languages -- SQL

       ISO/IEC 9075-2:1999 Database languages -- SQL -- Part 2: Foundation (SQL/Foundation)

       ISO/IEC 9075-2:2003 Database languages -- SQL -- Part 2: Foundation (SQL/Foundation)

AUTHOR

       Christian Hansen "chansen@cpan.org"

COPYRIGHT

       This program is free software, you can redistribute it and/or modify it under the same terms as Perl itself.

perl v5.8.8							    2008-03-28						   SQL::ReservedWords(3pm)