CVE-2018-16116

CVE-2018-16116 affects Sophos XG Firewall Admin Portal (version 17.0.8 MR-8). The vulnerability is a SQL injection in AccountStatus.jsp exploitable via the username GET parameter, allowing remote authenticated attackers to execute arbitrary SQL commands with partial/ HIGH impact on confidentialit...