CVE-2010-0115

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.36%

Published

Jan 14, 2011

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter.

Weaknesses (CWE)

CWE-89

Affected Products (5)

symantec · web_gatewayvulnerable

symantec · web_gateway_appliance

References (16)

http://osvdb.org/70415

http://secunia.com/advisories/42878

Vendor Advisory

http://www.securityfocus.com/bid/45742

http://www.securitytracker.com/id?1024958

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110112_00

http://www.vupen.com/english/advisories/2011/0088

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-11-013/

https://exchange.xforce.ibmcloud.com/vulnerabilities/64658

http://osvdb.org/70415

http://secunia.com/advisories/42878

Vendor Advisory

http://www.securityfocus.com/bid/45742

http://www.securitytracker.com/id?1024958

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110112_00

http://www.vupen.com/english/advisories/2011/0088

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-11-013/

https://exchange.xforce.ibmcloud.com/vulnerabilities/64658

KEV Catalog EPSS Scores Vendors All CVEs