CVE-2010-0115

Symantec Web Gateway 4.5 (before 4.5.0.376) contains a SQL injection in login.php’s USERNAME parameter in the GUI management console. The vulnerability allows remote attackers to inject arbitrary SQL into backend queries, potentially affecting data confidentiality, integrity, and availability. So...

CVE-2010-0115: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter...

PT-2011-1358

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 4.5.0.376 Description The issue allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter in the login.php file of the GUI management console. This can lead to remote code...