4 matches found
Sql injection
SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the addguestuser opcode...
CVE-2014-5503
SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the addguestuser opcode...
CVE-2014-5503: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the addguestuser opcode...
PT-2014-6499
Name of the Vulnerable Software and Affected Versions Sophos Cyberoam appliances with CyberoamOS versions prior to 10.6.1 GA Description The issue allows remote attackers to execute arbitrary SQL commands via the add guest user opcode in the Guest Login Portal. This is a SQL injection vulnerabili...