SonicWALL Aventail 'CategoryID' Parameter SQL Injection Vulnerability

SQL injection vulnerability in prodpage.cfm in SonicWALL Aventail allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter. CVE: CVE-2011-5262 Last updated: Feb. 13, 2013, 5 a.m...

CVE-2011-5262

The CVE-2011-5262 entry concerns SonicWALL Aventail, where the CategoryID parameter in prodpage.cfm is vulnerable to SQL injection due to improper input sanitization. The vulnerability allows remote attackers to execute arbitrary SQL commands against the underlying database. Public references inc...