CVE-2018-17562

Multi-Tech FaxFinder before 5.1.6 has SQL Injection via a status/call_details?oid= URI, allowing an attacker to extract the underlying database schema to further disclose other fax server information through different injection points.

Date published : 2018-10-03

CVE-2018-17562 – FaxFinder 5.0.5.8 < SQLite Injection Vulnerability