CVE-2014-0726 Information

Description

SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL aka Bug ID CSCum05326.

Reference

http://osvdb.org/103218 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0726 http://tools.cisco.com/security/center/viewAlert.x?alertId=32843 http://www.securityfocus.com/bid/65514