CVE-2015-6811

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml...

CVE-2015-6811

The CVE-2015-6811 entry describes a SQL injection in Sophos Cyberoam CR500iNG-XP firewall appliances running CyberoamOS 10.6.2 MR-1 and earlier. The vulnerability stems from inadequate filtering of the username parameter in login.xml, enabling remote attackers to execute arbitrary SQL commands. C...

CVE-2015-6811: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml...

PT-2015-7367

Name of the Vulnerable Software and Affected Versions Sophos Cyberoam CR500iNG-XP firewall appliance versions prior to CyberoamOS 10.6.2 MR-1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username parameter to the "login.xml" endpoint...

Cyberoam Firewall CR500iNG-XP - 10.6.2 MR-1 - Blind SQL Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Cyberoam : Blind SQL Injection Date: 31/Aug/2015 Exploit Author: Dharmendra Kumar Singh Contact: email protected Vendor Homepage: http://www.cyberoam.com Software Link: http://www.cyberoam.com/NGFW/ Version: CR500iNG-XP -...