mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-27 17:30:27 +01:00
741 B
741 B
CVE-2015-1875
Description
SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter.
POC
Reference
- http://packetstormsecurity.com/files/130698/Elastix-2.5.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/36305/
Github
No PoCs found on GitHub currently.