VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 31, 2007· Updated Apr 23, 2026

CVE-2007-4634

CVE-2007-4634

Description

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.

Affected products

31
  • Cisco Systems, Inc./Unified Communications Manager15 versions
    cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\):*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr2a:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_communications_manager:4.3\(1\):*:*:*:*:*:*:*
  • Cisco Systems, Inc./Call Manager16 versions
    cpe:2.3:h:cisco:call_manager:3.3\(5\)sr1:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:h:cisco:call_manager:3.3\(5\)sr1:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:3.3\(5\)sr2:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:3.3\(5\)sr2a:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.1:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.1\(3\)sr1:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.1\(3\)sr2:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.1\(3\)sr3:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.1\(3\)sr4:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2\(1\):*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2\(2\):*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2\(3\):*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2\(3\)sr1:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.2\(3\)sr2:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.3:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:call_manager:4.3\(1\):*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.