CVE-2012-4178

2012-08-0722:00:00

mitre

www.cve.org

AI Score

8.4

Confidence

Low

EPSS

0.003

Percentile

66.0%

JSON

SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter.

References

www.exploit-db.com/exploits/20123

www.securityfocus.com/bid/54721

www.securitytracker.com/id?1027358

exchange.xforce.ibmcloud.com/vulnerabilities/77264