CVE-2006-7144 - SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page

Back Back to CVE browser

HIGH

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page

Published Mar 7, 2007

7.5

HIGH

CVSS 2.0

EPSS 1.46%

Description

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html
mailing-listx_refsource_FULLDISCExploitVendor Advisory
http://secunia.com/advisories/22365
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/2389
third-party-advisoryx_refsource_SREASON
http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt
x_refsource_MISCExploitVendor Advisory
http://www.securityfocus.com/archive/1/448423/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20474
vdb-entryx_refsource_BIDVendor Advisory

Link	Providers	Tags
http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html		mailing-listx_refsource_FULLDISCExploitVendor Advisory
http://secunia.com/advisories/22365		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/2389		third-party-advisoryx_refsource_SREASON
http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt		x_refsource_MISCExploitVendor Advisory
http://www.securityfocus.com/archive/1/448423/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20474		vdb-entryx_refsource_BIDVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 7, 2007

Updated Aug 7, 2024

Reserved Mar 7, 2007

Link CVE-2006-7144

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-7144

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-7144