CVE-2018-17562 | BDVDB-2026-107705 Detail

Description#

Multi-Tech FaxFinder before 5.1.6 has SQL Injection via a status/call_details?oid= URI, allowing an attacker to extract the underlying database schema to further disclose other fax server information through different injection points.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://securityshards.wordpress.com/2018/10/02/cve-2018-17562-faxfinder-5-0-5-8-sqlite-inejection-vulnerability/

Exploit#

No public exploit known

History#

Version 12018-10-03Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.