Skip to content
OpenAdvisories
Unscored CVE-2015-2849 EUVD-2015-2937GHSA-2h78-fqf4-59qg

SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, a…

Published Jul 7, 2015 · Updated Aug 6, 2024 · Assigned by certcc

Description

SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter.

References