CVE-2011-0549

Related Files

Zero Day Initiative Advisory 11-233

Posted Jul 8, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-233 - This vulnerability allows remote attackers to inject arbitrary SQL on vulnerable installations of the Symantec Web Gateway appliance. Authentication is not required to exploit this vulnerability. The specific flaw exists within the username parameter of POST requests to the forget.php script. The parameter is not sanitized and a remote attacker can abuse this to inject arbitrary SQL into the underlying database.

tags | advisory, remote, web, arbitrary, php

advisories | CVE-2011-0549

SHA-256 | 87203ae1cbdf2e7d69bc6bc2e98651528d00f21540ac1ec7b2898b9546e99dcb

Download | Favorite | View