CVE-2011-0549

CWE-89 — SQL Injection3 documents3 sources
Severity
7.5HIGH
EPSS
1.1%
top 21.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec WEB Gateway
Timeline
PublishedJul 11
Latest updateMay 17

Description

SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDsymantec/web_gateway9 versions+8

🔴Vulnerability Details

2
GHSA
GHSA-w9cr-6gj4-6mgj: SQL injection vulnerability in forget↗2022-05-17
▶
CVEList
CVE-2011-0549: SQL injection vulnerability in forget↗2011-07-11
▶
CVE-2011-0549 (HIGH CVSS 7.5) | SQL injection vulnerability in forg | cvebase.io