CVE-2012-4178 in Web Gateway

Sumário (Inglês)

SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

07/08/2012

Divulgação

07/08/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
5913	Symantec Web Gateway deptUploads_data.php Injeção SQL	89	Alto	Correção oficial	CVE-2012-4178

Fontes

• MITRE
• NVD
• CVE Details