Dec. 18, 2023, 8:06 p.m. | MalBot

Malware Analysis, News and Indicators - Latest topics malware.news

Major voice-over IP software provider 3CX has issued a security advisory urging the immediate deactivation of SQL database integrations through PostgreSQL, MySQL, MsSQL, and MongoDB due to security risks stemming from a vulnerability, which was later confirmed to be an SQL injection flaw within the software's CRM integration with SQL databases, BleepingComputer reports.


Article Link: VoIP powerhouse 3CX urges deactivation of SQL database integrations | SC Media


1 post - 1 participant


Read full topic

3cx advisory crm database databases deactivation flaw injection injection flaw integration integrations major mongodb mssql mysql postgresql risks security security advisory security risks software sql sql database sql injection voice voip vulnerability

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Associate Compliance Advisor

@ SAP | Budapest, HU, 1031

DevSecOps Engineer

@ Qube Research & Technologies | London

Software Engineer, Security

@ Render | San Francisco, CA or Remote (USA & Canada)

Associate Consultant

@ Control Risks | Frankfurt, Hessen, Germany

Senior Security Engineer

@ Activision Blizzard | Work from Home - CA