CVE-2019-7478

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SonicWall	GMS	GMS 8.4; GMS 8.5; GMS 8.6; GMS 8.7; GMS 9.0; GMS 9.1

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0011Vendor Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0011Vendor Advisory

Timeline

Published: Dec 31, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-74797.2A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected So CVE-2019-74817.5Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted CVE-2019-74829.8Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnera CVE-2019-74837.5In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the prese CVE-2019-74846.5Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. T CVE-2019-74858.8Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability imp CVE-2019-74868.8Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impac CVE-2019-74877.8Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes CVE-2019-74889.8Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. T CVE-2019-74899.8A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability aff CVE-2019-75247.8In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can b CVE-2019-75355.3index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path discl