info
discussion
exploit
solution
references
Asterisk 'asterisk-addons' CDR_ADDON_MYSQL Module SQL Injection Vulnerability
An attacker can exploit this issue via a browser.
A proof of concept is available.
/data/vulnerabilities/exploits/asterisk_addons_sql.pl
Privacy Statement
Copyright 2010, SecurityFocus