CVE:CVE-2011-5050
CNNVD:CNNVD-201201-039
Elitecore Technologies Cyberoam UTM 10.01.2 build 059之前版本的corporate/Controller中存在SQL注入漏洞。远程认证管理员可借助tableid参数执行任意SQL命令。
solution:Upgrade elitecore cyberoam_unified_threat_management to a higher version than *:build0739,10.00:build0309,10.01:build0667,cr300i:10,cr500i:10,and avoid the version *:build0739,10.00:build0309,10.01:build0667,cr300i:10,cr500i:10