SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability

Document Title: =============== SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=769 DELL Sonicwall Bug ID DSBID: 123995 Release Date: ============= 2012-12-18 Vulnerability Laboratory ID VL-ID:...

SonicWALL Global VPN客户端日志文件远程格式串漏洞

Bugraq ID: 35093 CNCAN ID：CNCAN-2009052706 SonicOS Enhanced SonicOSe是SonicWALL sonicOS操作系统最新版本，设计用于下一代SonicWALL firewall/VPN应用设备。 SonicOS的日志文件解析函数存在格式串问题，远程攻击者可以利用漏洞通过注入格式串字符到日志文件使系统崩溃或执行任意代码。 可通过多种方法注入格式串字符到日志中，当管理员使用SonicOS GUI查看日志时可触发此漏洞。 如下方法可测试此漏洞： 1，CFS:增加ebay.com到"Forbidden...

SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability

SEC Consult Security Advisory 20090525-4 ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions...

SonicWALL Content Filtering Blocked Site Error Page Cross-Site Scripting Vulnerability

Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...

CVE-2008-4918

SonicWALL SonicOS Enhanced (pre-4.0.1.1) on SonicWALL Pro 2040 and TZ 180/190 is affected by an XSS vulnerability in the Content Filtering (CFS) block page. A crafted URL to a blocked site can cause arbitrary web script or HTML to be injected into the target’s browser, enabling universal website ...

CVE-2008-4918

Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...

CVE-2008-4918: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...

SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/31998/info SonicWALL Content Filtering is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data in a blocked-site error page. An attacker may leverage this iss...

SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting

SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/31998/info SonicWALL Content Filtering is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI...