<% dim ModuleName,InfoID,ChannelShortName,CorrelativeArticle,InstallDir,ChannelDir,Keyword,PageTitle,ArticleIntro,Articlecontent Keyword=stripHTML("漏洞,注入") PageTitle=stripHTML("Cisco Unified Communications Manager SQL注入漏洞(CVE-2015-") ArticleIntro=stripHTML("Cisco Unified Communications Manager SQL注入漏洞(CVE-2015-,CiscoUnifiedCommunicationsManagerSQL注入漏洞(CVE-") Articlecontent=stripHTML("Cisco Unified Communications Manager SQL注入漏洞(CVE-2015-0715)发布日期:2015-05-06更新日期:2…") ModuleName = stripHTML("exploits") InfoID = stripHTML("198233") ChannelShortName=stripHTML("漏洞") InstallDir=stripHTML("http://www.77169.org/") ChannelDir=stripHTML("exploits") %> Cisco Unified Communications Manager SQL注入漏洞(CVE-2015- - 华盟网 - http://www.77169.org
您现在的位置: 华盟网 >> 漏洞 >> 最新漏洞 >> 路由 >> 正文

Cisco Unified Communications Manager SQL注入漏洞(CVE-2015-

2015/5/13 作者:不祥 来源: 互联网
导读 <% if len(ArticleIntro)<3 then Response.Write Articlecontent 'Response.Write "Articlecontent" else Response.Write ArticleIntro 'Response.Write "ArticleIntro" end if %>

Cisco Unified Communications Manager SQL注入漏洞(CVE-2015-0715)

发布日期:2015-05-06
更新日期:2015-05-07
受影响系统:
Cisco Unified Communications Manager 11.0(0.98000.225)

描述:

CVE(CAN) ID: CVE-2015-0715
Cisco Unified Communications Manager是企业级IP电话呼叫处理系统。
Cisco Unified Communications Manager 11.0(0.98000.225)的管理Web接口存在sql注入漏洞,经过身份验证的远程用户利用此漏洞可执行任意sql命令。
<*来源:Cisco
*>
建议:
厂商补丁:
Cisco
-----
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:
http://tools.cisco.com/security/center/viewAlert.x?alertId=38674