Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symantec Sygate Management Server认证Applet远程SQL注入漏洞
Vulnerability Description
Sygate Management Server是Sygate安全套件的管理端服务器，可以管理所有Sygate Security节点，定义和强制安全策略、配置监控网络的安全性。 Sygate Management Server处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞对服务器执行SQL注入攻击，非授权访问控制数据库。Sygate Management Server的Sygate.Servlet.login Applet对用户提交的uid参数未做充分地检查过滤，远程攻击者可以在输入中插入SQL
CVSS Information
N/A
Vulnerability Type
N/A