Switchvox vulnerabilities
1 known vulnerability in Switchvox from Sangoma. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Sangoma Switchvox SQL Injection Exploited
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with <PolycomIPPhone> and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries with