module
Vicidial SQL Injection Time-based Admin Credentials Enumeration
Disclosed |
---|
2024-09-10 |
Disclosed
2024-09-10
Description
This module exploits a time-based SQL injection vulnerability in VICIdial, allowing attackers
to dump admin credentials (usernames and passwords) via SQL injection.
to dump admin credentials (usernames and passwords) via SQL injection.

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.