NVD

Id
33138  
Name
CVE-2014-5503  
Description
SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL commands via the add_guest_user opcode.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-10-07  
Modified Date
2014-10-08  
Seq
2014-5503  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173765 33138 CVE-2014-5503 http://kb.cyberoam.com/default.asp?id=3049  View
173766 33138 CVE-2014-5503 http://www.zerodayinitiative.com/advisories/ZDI-14-329/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15724 JVNDB-2014-004599 Sophos Cyberoam アプライアンスの CyberoamOS の Guest Login Portal における SQL インジェクションの脆弱性 Sophos Cyberoam アプライアンスの CyberoamOS の Guest Login Portal には、SQL インジェクションの脆弱性が存在します。 CVE-2014-5503 72793 CVE-2014-5503 33138 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004599.html 2014-09-15 2014-10-09 View