PT-2013-6268

Name of the Vulnerable Software and Affected Versions McAfee Email Gateway version 7.6 Description The issue concerns SQL injection vulnerabilities in the /admin/cgi-bin/rpc/doReport/18 endpoint. Remote authenticated users can execute arbitrary SQL commands by manipulating specific JSON keys,...

CVE-2013-7092: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the 1 eventscol, 2 eventid, 3 reason, 4 eventsorder, 5 emailstatusorder, or 6 emailstatuscol JSON keys...