{"id":"CVE-2015-6811","aliases":["EUVD-2015-6748","GHSA-rhxh-mmx8-25r4"],"status":"published","title":"SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS...","description":"SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01734,"percentile":0.77787,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2015-09-04T15:00:00Z","modified":"2026-06-17T00:31:27Z","exploits":[{"source":"exploitdb","id":"EDB-38034","title":"Cyberoam Firewall CR500iNG-XP 10.6.2 MR-1 - Blind SQL Injection","type":"webapps","platform":"hardware","date":"2015-08-31","url":"https://www.exploit-db.com/exploits/38034"}],"products":[{"vendor":"cyberoam","product":"cyberoamos"}],"references":[{"url":"http://packetstormsecurity.com/files/133378/Cyberoam-CR500iNG-XP-10.6.2-MR-1-Blind-SQL-Injection.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/38034/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6811"},{"url":"https://www.exploit-db.com/exploits/38034"},{"url":"https://github.com/advisories/GHSA-rhxh-mmx8-25r4"}],"sources":{"cve":[{"id":"CVE-2015-6811","description":"SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml.","status":"published","published":"2015-09-04T15:00:00Z","modified":"2024-09-16T16:48:44.591Z","updated_at":"2026-11-02T14:35:42.680858Z"}],"euvd":[{"id":"EUVD-2015-6748","description":"SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml.","status":"published","published":"2015-09-04T15:00:00Z","modified":"2024-09-16T16:48:44Z","updated_at":"2026-11-03T00:55:48.234114Z"}],"ghsa":[{"id":"GHSA-rhxh-mmx8-25r4","title":"SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS...","description":"SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml.","status":"published","published":"2022-05-14T00:57:41Z","modified":"2025-04-12T12:52:44Z","cwes":["CWE-89"],"updated_at":"2026-11-02T15:01:23.793952Z"}],"nvd":[{"id":"CVE-2015-6811","description":"SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml.","status":"published","published":"2015-09-04T15:59:09.227Z","modified":"2026-06-17T00:31:27.703Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:03:09.92183Z"}]}}