CVE-2013-5017

SNMPConfig.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-1650

SQL injection vulnerability in user.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-1651

SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-1652

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec Web Gateway SWG before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters...

Sql injection

SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec Web Gateway SWG before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters...

Sql injection

SQL injection vulnerability in user.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Command injection

SNMPConfig.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-1650

SQL injection vulnerability in user.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-1651

SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-1650

CVE-2014-1650 : Symantec Web Gateway (SWG) management console contains a SQL injection in the file user.php prior to version 5.2.1. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. The issue is addressed in SWG 5.2.1, which should be d...

CVE-2014-1651

CVE-2014-1651 affects Symantec Web Gateway (SWG) management console: SQL injection in clientreport.php allows a remote attacker to execute arbitrary SQL commands before version 5.2. The issue is tied to improper input handling (hostname parameter). Remediation per SYM14-010 is to upgrade to SWG 5...

CVE-2014-1652

Symantec Web Gateway (SWG) management console prior to 5.2 is affected by CVE-2014-1652: multiple cross-site scripting vulnerabilities allow remote authenticated users to inject script via unspecified report parameters (e.g., entSummary.php, custom_report.php, host_spy_report.php, repairedclients...

CVE-2013-5017

SNMPConfig.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-1652

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec Web Gateway SWG before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters...

CVE-2013-5017

Symantec Web Gateway (SWG) prior to 5.2.1 is affected by CVE-2013-5017 due to a command injection vulnerability in SNMPConfig.php that can lead to remote code execution. The issue is described across multiple sources as affecting the management console and enabling arbitrary command execution, po...

McAfee Web Gateway < 7.3.2.2 DoS (SB10052)

The remote host has a version of McAfee Web Gateway MWG prior to 7.3.2.2. It is, therefore, affected by a denial of service vulnerability due to a flaw in the packaged ISC BIND server. An attacker can exploit this vulnerability by sending a specially crafted query with a malformed RDATA section. ...

McAfee Web Gateway < 7.1.0.5 / 7.1.5.2 XSS

The remote host has a version of McAfee Web Gateway MWG prior to 7.1.0.5 / 7.1.5.2. It is, therefore, reportedly affected by an unspecified cross-site scripting vulnerability in the web UI. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Symantec Web Gateway user.php SQL Injection and snmpConfig.php Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is required to exploit this vulnerability. The specific flaws exist within the user.php and snmpConfig.php files. SQL injection and command injection is possibl...

Symantec Web Gateway contains SQL injection and cross-site scripting vulnerabilities

Overview Symantec Web Gateway 5.1.1.24, and possibly earlier versions, contains cross-site scripting and SQL injection vulnerabilities. Description CVE-2014-1652 -CWE-79: Improper Neutralization of Input During Web Page Generation Symantec Web Gateway 5.1.1.24, and possibly earlier versions,...