mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-10 20:04:58 +02:00
0xMarcio
1.1 KiB
1.1 KiB
CVE-2015-5452
Description
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.
POC
Reference
- http://packetstormsecurity.com/files/132498/Watchguard-XCS-10.0-SQL-Injection-Command-Execution.html
- http://packetstormsecurity.com/files/132498/Watchguard-XCS-10.0-SQL-Injection-Command-Execution.html
- http://packetstormsecurity.com/files/133721/Watchguard-XCS-Remote-Command-Execution.html
- http://packetstormsecurity.com/files/133721/Watchguard-XCS-Remote-Command-Execution.html
- https://www.exploit-db.com/exploits/38346/
- https://www.exploit-db.com/exploits/38346/
Github
No PoCs found on GitHub currently.