Call-Center-Software Multiple Input Validation and Information Disclosure Vulnerabilities

Bugtraq ID:	20474
Class:	Input Validation Error
CVE:	CVE-2006-7145
Remote:	Yes
Local:	No
Published:	Oct 11 2006 12:00AM
Updated:	Jul 06 2016 02:40PM
Credit:	Mayhemic Labs discovered these issues.
Vulnerable:	Call-Center-Software Call-Center-Software 0.93
Not Vulnerable:

Call-Center-Software Multiple Input Validation and Information Disclosure Vulnerabilities

Call-Center-Software is prone to multiple cross-site scripting, SQL-injection, and information-disclosure vulnerabilities.

Exploiting these issues may allow an attacker to access or modify sensitive data, to execute arbitrary script code, or to steal cookie-based authentication credentials; other attacks are possible.

Call-Center-Software 0.93 and prior versions are vulnerable.

Call-Center-Software Multiple Input Validation and Information Disclosure Vulnerabilities

An attacker can exploit these vulnerabilities via a web client.

Call-Center-Software Multiple Input Validation and Information Disclosure Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Call-Center-Software Multiple Input Validation and Information Disclosure Vulnerabilities

References: