CVE-2006-0522

CVE-2006-0522 describes a SQL injection in Symantec’s Sygate Management Server (SMS) Authentication Servlet. The vulnerability affects SMS version 4.1, build 1417 and earlier, and could let a remote attacker inject SQL via a URL to bypass authentication and potentially overwrite the password for ...