Unscored severity · published Jul 8, 2015
CVE-2015-5452
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a…
–
CVSS
3.4%
EPSS
No
On KEV
Description
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XC
Xcs · Watchguard
9.2; 10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5452
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5452
Exploit
http://packetstormsecurity.com/files/132498/Watchguard-XCS-10.0-SQL-Injection-Command-Execution.html
Exploit
http://packetstormsecurity.com/files/133721/Watchguard-XCS-Remote-Command-Execution.html
Exploit
http://www.rapid7.com/db/modules/exploit/freebsd/http/watchguard_cmd_exec
Exploit
http://www.security-assessment.com/files/documents/advisory/Watchguard-XCS-final.pdf
www.securityfocus.com
http://www.securityfocus.com/bid/75516
Vendor Advisory
http://www.watchguard.com/support/release-notes/xcs/10/en-US/EN_Release_Notes_XCS_v10_0_Security_Hotfix/EN_Release_Notes_XCS_v10_0_Security_Hotfix.pdf
More from Xcs
–
CVE-2015-5453
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl
–
CVE-2011-2165
The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP…