Security Advisory
CVE-2015-1875
7.5
Vulnerability Description
SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter.
Published Date
March 11, 2015
Official Source
NIST NVD Advisory