VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 31, 2007· Updated Jun 16, 2026

CVE-2007-4634

CVE-2007-4634

Description

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

34
  • Cisco Systems, Inc./Unified Communications Manager16 versions
    cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\):*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr2a:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.3\(1\):*:*:*:*:*:*:*
    • (no CPE)range: <3.3(5)sr2b
  • Cisco Systems, Inc./Unified Callmanager17 versions
    cpe:2.3:h:cisco:call_manager:3.3\(5\)sr1:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:h:cisco:call_manager:3.3\(5\)sr1:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:3.3\(5\)sr2:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:3.3\(5\)sr2a:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.1:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.1\(3\)sr1:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.1\(3\)sr2:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.1\(3\)sr3:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.1\(3\)sr4:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2\(1\):*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2\(2\):*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2\(3\):*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2\(3\)sr1:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2\(3\)sr2:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.3:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.3\(1\):*:*:*:*:*:*:*
    • (no CPE)range: <3.3(5)sr2b
  • Cisco Systems, Inc./CUCMllm-fuzzy
    Range: <3.3(5)sr2b

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.