CVE-2011-1903

SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2011-05-05

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Messaging Security Gateway (Proofpoint)
• Protection Server (Proofpoint)

References

• http://www.clearskies.net/documents/css-advisory-css1105-proofpoint.php
• http://www.kb.cert.org/vuls/id/790980
• https://support.proofpoint.com/article.cgi?article_id=338413