Back
CVE-2003-0779
SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.
Published: Sep 22, 2003
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (7)
| Vendor | Product | Version |
|---|---|---|
| digium | asterisk | 0.1.7 |
| digium | asterisk | 0.1.8 |
| digium | asterisk | 0.1.9 |
| digium | asterisk | 0.1.9.1 |
| digium | asterisk | 0.2 |
| digium | asterisk | 0.3 |
| digium | asterisk | 0.4 |
GitHub Security Advisory GHSA-8q43-h274-m6cf
SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk...
References (2)
- http://www.atstake.com/research/advisories/2003/a091103-1.txt Exploit, Vendor Advisory
- http://www.atstake.com/research/advisories/2003/a091103-1.txt Exploit, Vendor Advisory
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
1.48%
Top 28% most likely to be exploited
Threat Score
30.4 / 100
Data Sources
NVD
EPSS
GitHub