Search: CVE-2024-8503

CVE-2024-8503 is a critical SQL injection vulnerability in VICIdial version 2.14-917a that allows unauthenticated attackers to perform time-based SQL injection to enumerate database records. VICIdial stores plaintext credentials by default, increasing the risk of credential exposure. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.