ANTlabs InnGate Firmware SQL Injection Vulnerability

ANTlabs InnGate firmware on IG 3100 etc. is a firmware from ANTlabs Singapore for use in IG 3100 gateways and other devices. A SQL injection vulnerability exists in the main.ant file in the ANTlabs InnGate firmware on multiple ANTlabs devices. A remote attacker could execute arbitrary queries on...

CVE-2015-2849: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter...