CVE-2008-0026 | Cisco Unified CallManager up to 5.x User Interface key sql injection (EDB-31189 / XFDB-40484)
A vulnerability was found in Cisco Unified CallManager up to 5.x. It has been classified as critical. This affects an unknown part of the component User Interface. The manipulation of the argument key leads to sql injection.
This vulnerability is uniquely identified as CVE-2008-0026. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.