CVE-2011-5050

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-01-04 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information.

Affected products

Elitecore Cyberoam Unified Threat Management: through 10.01.0; 10.00-build0309, 10.01-build0667, cr300i-10, cr500i-10

References

http://osvdb.org/77986
http://secunia.com/advisories/47304
http://www.vulnerability-lab.com/get_content.php?id=60
https://exchange.xforce.ibmcloud.com/vulnerabilities/71920
http://osvdb.org/77986
http://secunia.com/advisories/47304
http://www.vulnerability-lab.com/get_content.php?id=60
https://exchange.xforce.ibmcloud.com/vulnerabilities/71920

Get alerted when CVE-2011-5050 or the next vulnerability affects your stack