Security Advisory
CVE-2014-3857
6.5
Vulnerability Description
Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before 8.3.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) x_16 or (2) x_17 parameter to print.php.
Published Date
July 3, 2014
Official Source
NIST NVD Advisory