EUVD-2011-2529

Malware in sbrugna...

EUVD-2011-2530

Malware in sbrugna...

Cisco SA 500 security vulnerabilities

SQL injection, privilege escalation...

Sql injection

SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...

PT-2011-3925

Name of the Vulnerable Software and Affected Versions Cisco SA 500 series security appliances versions prior to 2.1.19 Description A SQL injection issue exists in the web-based management interface, allowing remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to...

CVE-2011-2546: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...

CVE-2011-2547: Undefined Security Weakness

The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681...

PT-2011-3926

Name of the Vulnerable Software and Affected Versions Cisco SA 500 series security appliances versions prior to 2.1.19 Description The issue allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms. Recommendations For versions prior to 2.1.19, update to...

Cisco SA 500 Series Security Appliances Web Management Interface SQL Injection Vulnerability

Cisco SA 500 Series Security Appliances firmware contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary SQL code on a system. The vulnerability is due to improper validation of user-supplied input to the Cisco SA 500 Security Appliance web-based...