CVE-2014-3857 Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before 8.3.2 allow remote authenticated users to execute arbitrary SQL commands via the...
MediumCVSS 6.5
EPSS 2.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before 8.3.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) x_16 or (2) x_17 parameter to print.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kerio control | <= 8.3.1 | No fix listed |
| kerio control | = 8.3.0 | No fix listed |
References
- fereidani.com exploit
- 108584 vdb-entry
- packetstormsecurity.com
- 59215 third-party-advisory
- 33954 exploit
- www.kerio.com
- 20140630 Kerio Control <= 8.3.1 Boolean-based blind SQL Injection mailing-list