Mitel MiCollab NuPoint Messenger (NPM) through 9.8.0.33 contains a sql_injection caused by insufficient sanitization of user input, letting unauthenticated attackers access sensitive data and execute ...