Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

S-189: SQL Injectionin Cisco Unified Communications Manager

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-189: SQL Injectionin Cisco Unified Communications Manager
# 1  
Old 02-15-2008
S-189: SQL Injectionin Cisco Unified Communications Manager
Cisco Unified Communications Manager is vulnerable to a SQL Injection attack in the parameter key of the admin and user interface pages. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database. The risk is LOW. An authenticated attacker may be able to exploit this vulnerability to extract records from the Cisco Unified Communications Manager database. A successful attack might retrieve sensitive data such as user names, passwords hashes, and information from call records. An attacker cannot use this vulnerability to alter or delete call record information from the database.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

sql::translator::parser

SQL::Translator::Parser(3pm)				User Contributed Perl Documentation			      SQL::Translator::Parser(3pm)

NAME

       SQL::Translator::Parser - describes how to write a parser

DESCRIPTION

       Parser modules that get invoked by SQL::Translator need to implement a single function: parse.  This function will be called by the
       SQL::Translator instance as $class::parse($tr, $data_as_string), where $tr is a SQL::Translator instance.  Other than that, the classes are
       free to define any helper functions, or use any design pattern internally that make the most sense.

       When the parser has determined what exists, it will communicate the structure to the producer through the SQL::Translator::Schema object.
       This object can be retrieved from the translator (the first argument pass to parse) by calling the schema method:

	 my $schema = $tr->schema;

       The Schema object has methods for adding tables, fields, indices, etc.  For more information, consult the docs for SQL::Translator::Schema
       and its related modules.  For examples of how this works, examine the source code for existing SQL::Translator::Parser::* modules.

AUTHORS

       Ken Youens-Clark, <kclark@cpan.org<gt>, darren chamberlain <darren@cpan.org>.

SEE ALSO

       perl(1), SQL::Translator, SQL::Translator::Schema.

perl v5.14.2							    2012-01-18					      SQL::Translator::Parser(3pm)