CVE-2006-7144

Published: Mar 7, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page.

Affected (1)

Products: Call Center Software: Call Center Software

Call Center Software

1 product

Call Center Software

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Call Center Software Call Center Software	Up to 0.93

References (12)

http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/22365

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2389

Source: cve@mitre.org

http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/448423/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20474

Source: cve@mitre.org

Vendor Advisory

http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html