SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0753
Reference (s):
- CISCO:20150527 Cisco Unified Email Interaction Manager and Cisco Unified Web Interaction Manager SQL Injection Vulnerability
- URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=39013
- SECTRACK:1032422
- URL: http://www.securitytracker.com/id/1032422