A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1. This affects the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the database handler. The manipulation leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.
References
| Link | Resource |
|---|---|
| http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt | Third Party Advisory |
| https://vuldb.com/?id.12789 | Third Party Advisory |
| http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt | Third Party Advisory |
| https://vuldb.com/?id.12789 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt - Third Party Advisory | |
| References | () https://vuldb.com/?id.12789 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 6.5 |
08 Jun 2022, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:telecomsoftware:samwin_agent:5.01.19.06:*:*:*:*:*:*:* cpe:2.3:a:telecomsoftware:samwin_contact_center:5.1:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
| CWE | CWE-89 | |
| References | (MISC) https://vuldb.com/?id.12789 - Third Party Advisory | |
| References | (MISC) http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt - Third Party Advisory |
24 May 2022, 17:22
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-05-24 16:15
Updated : 2024-11-21 01:48
NVD link : CVE-2013-10003
Mitre link : CVE-2013-10003
CVE.ORG link : CVE-2013-10003
JSON object : View
Products Affected
telecomsoftware
- samwin_agent
- samwin_contact_center
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')