CVE-2019-13409

Name of the Vulnerable Software and Affected Versions TOPMeeting versions prior to 8.8

Description A SQL injection issue was found, allowing an attacker to use a union-based injection query string through the search meeting room feature to obtain the database schema and username/password.

Recommendations For versions prior to 8.8, update to version 8.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the search meeting room feature until a patch is applied.