• info
• discussion
• exploit
• solution
• references

Asterisk 'asterisk-addons' CDR_ADDON_MYSQL Module SQL Injection Vulnerability

An attacker can exploit this issue via a browser.

A proof of concept is available.

• /data/vulnerabilities/exploits/asterisk_addons_sql.pl