Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2007-6171

SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.0%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2007-6171
  • Digium » Asterisk » Version: 1.4.0
    cpe:2.3:a:digium:asterisk:1.4.0
  • Digium » Asterisk » Version: 1.4.1
    cpe:2.3:a:digium:asterisk:1.4.1
  • Digium » Asterisk » Version: 1.4.10
    cpe:2.3:a:digium:asterisk:1.4.10
  • Digium » Asterisk » Version: 1.4.10.1
    cpe:2.3:a:digium:asterisk:1.4.10.1
  • Digium » Asterisk » Version: 1.4.11
    cpe:2.3:a:digium:asterisk:1.4.11
  • Digium » Asterisk » Version: 1.4.12
    cpe:2.3:a:digium:asterisk:1.4.12
  • Digium » Asterisk » Version: 1.4.12.1
    cpe:2.3:a:digium:asterisk:1.4.12.1
  • Digium » Asterisk » Version: 1.4.13
    cpe:2.3:a:digium:asterisk:1.4.13
  • Digium » Asterisk » Version: 1.4.14
    cpe:2.3:a:digium:asterisk:1.4.14
  • Digium » Asterisk » Version: 1.4.2
    cpe:2.3:a:digium:asterisk:1.4.2
  • Digium » Asterisk » Version: 1.4.3
    cpe:2.3:a:digium:asterisk:1.4.3
  • Digium » Asterisk » Version: 1.4.4
    cpe:2.3:a:digium:asterisk:1.4.4
  • Digium » Asterisk » Version: 1.4.5
    cpe:2.3:a:digium:asterisk:1.4.5
  • Digium » Asterisk » Version: 1.4.6
    cpe:2.3:a:digium:asterisk:1.4.6
  • Digium » Asterisk » Version: 1.4.7
    cpe:2.3:a:digium:asterisk:1.4.7
  • Digium » Asterisk » Version: 1.4.7.1
    cpe:2.3:a:digium:asterisk:1.4.7.1
  • Digium » Asterisk » Version: 1.4.8
    cpe:2.3:a:digium:asterisk:1.4.8
  • Digium » Asterisk » Version: 1.4.9
    cpe:2.3:a:digium:asterisk:1.4.9
  • Digium » Asterisk » Version: c.1.0
    cpe:2.3:a:digium:asterisk:c.1.0


Contact Us

Shodan ® - All rights reserved