Secunia Security Advisory – Avaya has acknowledged two vulnerabilities and a weakness in various Avaya products, which potentially can be exploited by malicious, local users to bypass certain security restrictions, and by malicious people to conduct SQL injection attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47385/sa20653.txt
Source: https://packetstormsecurity.com/files/47385/Secunia-Security-Advisory-20653.html