CVE-2016-2351: SQL Injection
SQL injection vulnerability in home/seos/courier/securitykey2.api on the Accellion File Transfer Appliance (FTA) before FTA91240 allows remote attackers to execute arbitrary SQL commands via the clientid parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2351?
CVE-2016-2351 has been classified as a high-severity vulnerability due to its potential for remote SQL injection.
How can I mitigate CVE-2016-2351?
To mitigate CVE-2016-2351, upgrade the Accellion File Transfer Appliance to version FTA_9_12_40 or later.
What type of attack does CVE-2016-2351 enable?
CVE-2016-2351 enables remote attackers to execute arbitrary SQL commands through a crafted client_id parameter.
Which versions of Accellion File Transfer Appliance are affected by CVE-2016-2351?
CVE-2016-2351 affects Accellion File Transfer Appliance versions prior to FTA_9_12_40.
Is it safe to use Accellion File Transfer Appliance without addressing CVE-2016-2351?
Using Accellion File Transfer Appliance without addressing CVE-2016-2351 poses significant security risks due to the vulnerability's potential impact.