high7.5Public exploit code
CVE-2015-6811
SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute ar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cyberoam Firewall CR500iNG-XP 10.6.2 MR-1 - Blind SQL Injection2015-08-31 · webapps · hardware
Impact
SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cyberoam | Cyberoamos | Version 10.6.2 |