CVE-2014-5503

SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the add_guest_user opcode.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2014-10-07

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Cyberoam Os (Cyberoam)

References

• http://kb.cyberoam.com/default.asp?id=3049
• http://www.zerodayinitiative.com/advisories/ZDI-14-329/