CyberRota Analysis
AI-GeneratedAster Telecom Azcall 10/11 is vulnerable to SQL injection due to improper handling of the HTTP request parameters in the component HTTP Handler. This flaw allows remote attackers to manipulate the argument values, potentially leading to unauthorized access to the database and exposure of sensitive information. Organizations using this software should prioritize patching or mitigating this vulnerability to prevent exploitation, especially given the public availability of the exploit.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown processing of the file /azcall/adm/gestao_loja/sis.php?t=consultar of the component HTTP Handler. Executing a manipulation of the argument nome/perfil/status can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.