6
CVSSv2

CVE-2011-5050

Published: 04/01/2012 Updated: 29/08/2017
CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8
VMScore: 605
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM prior to 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

elitecore cyberoam unified threat management cr500i

elitecore cyberoam unified threat management 10.00

elitecore cyberoam unified threat management 10.01

elitecore cyberoam unified threat management cr300i

elitecore cyberoam unified threat management

Exploits

source: wwwsecurityfocuscom/bid/51143/info Cyberoam UTM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the under ...