EXODUS BLOG

Day: June 9, 2022

Mitel Web Management Interface Buffer Overflow Vulnerability

JUNE 9, 2022

EIP-c4542e4d A stack-based buffer overflow vulnerability exists within multiple Mitel product web management interfaces, including the 3300 Controller and MiVoice Business product lines. Improper handling of the ‘Lang’ query parameter allows remote unauthenticated attackers...

SalesAgility SuiteCRM ‘deleteAttachment’ Type Confusion Vulnerability

JUNE 9, 2022

EIP-0077b802 A type confusion vulnerability exists within SalesAgility SuiteCRM within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email...

SalesAgility SuiteCRM ‘export’ Request SQL Injection Vulnerability

JUNE 9, 2022

EIP-0f5d2d7f A SQL injection vulnerability exists within SalesAgility SuiteCRM within the processing of the ‘uid’ parameter within the ‘export’ functionality. Successful exploitation allows remote unauthenticated attackers to ultimately execute arbitrary code. Vulnerability Identifiers Exodus...