CVE-2015-5452 in WatchGuard XCS
Sumário (Inglês)
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.
Reservar
08/07/2015
Divulgação
08/07/2015
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 76341 | WatchGuard XCS sid Cookie compose.php3 Injeção SQL | 89 | Prova de conceito | Correção oficial | CVE-2015-5452 |