Required CVE Record Information
Description
SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary SQL commands via the "username" GET parameter.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.