CVE-2015-5452 in WatchGuard XCSinfo

Summary

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.

Reservation

07/08/2015

Disclosure

07/08/2015

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
76341WatchGuard XCS sid Cookie compose.php3 sql injection89Proof-of-ConceptOfficial fixCVE-2015-5452

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!