NetSight
IP …
medium6.0Public exploit code

CVE-2011-5050

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information.

Affected products

VendorProductAffected versions
ElitecoreCyberoam Unified Threat Management
through 10.01.0
Versions 10.00, 10.01, cr300i, cr500i

Weakness classification

CWE-89

References