CVE-2012-0337

Description

SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939.

Affected products

• Cisco / unified_meetingplace7.1 – 7.1

References

• VENDOR_ADVISORYhttp://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/7_1/english/release_notes/mp71rn.html