SonicWALL Aventail SSL-VPN SQL Injection

` ================================================================================  
  
SonicWALL Aventail SSL-VPN SQL Injection Vulnerability  
================================================================================  
  
  
#Date- 17/11/11  
  
# code by Asheesh kumar Mani Tripathi  
  
  
  
# Credit by Asheesh Anaconda  
  
  
  
#Vulnerbility  
SonicWALL Aventail SSL-VPN is prone to an SQL-injection vulnerability because the application fails to properly   
sanitize user-supplied input before using it in an SQL query.  
  
#Impact  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database  
  
  
========================================================================================================================  
  
Request  
========================================================================================================================  
  
https://example.xxx.com/prodpage.cfm?CFID=&CFTOKEN=&CategoryID=[SQL]  
  
`