PoC Index

CVE-2015-6811

HIGH 7.5EPSS 1.7%

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml.

CVSS v2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
1.73% chance of exploitation in the next 30 days, 76th percentile
Published
2015-09-04
Updated
2024-09-16

Proof-of-concept exploits (1)

ExploitDB entries (1)

References

Related