Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)

An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)

An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2012-2961

The CVE-2012-2961 issue affects Symantec Web Gateway, specifically the management console. A SQL injection vulnerability in the gateway’s web interface (notably via search.php and related DB utilities) allowed remote, unauthenticated attackers to execute arbitrary SQL against the backend database...