critical9.8
CVE-2015-6319
SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a craft…
Impact
SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Rv Series Router Firmware | Versions 1.0.0.2, 1.0.0.30, 1.0.1.9, 1.0.2.6, 1.0.3.10, 1.0.4.10 |
| Sun | Opensolaris | Version snv_124 |