Description
Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Switchvox SMB Edition | Sangoma / Switchvox SMB Edition | >= 8.3 (104997), < 8.4.0.2 | affected |