817 matches found
PT-2015-7037
Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2.2 DB 5.0.0.1277 Description The issue allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands on the management console of Symantec Web Gateway applianc...
PT-2015-7038
Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2.2 DB 5.0.0.1277 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in PHP scripts within the management console of Symantec Web Gateway appliances. These vulnerabilities...
Symantec Web Gateway Arbitrary PHP File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is required to exploit this vulnerability, however it can be bypassed via reflected cross-site scripting. The specific flaw exists within the adminmessages.php...
Symantec Web Gateway Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is not required to exploit this vulnerability. The specific flaw exists within the path processing for command URLs accessed through the management port of the...
Symantec Web Gateway < 5.2 Multiple Vulnerabilities (SYM14-003)
Binary data 8769.prm...
Symantec Web Gateway OS Command Injection (CVE-2014-7285; CVE-2016-5313)
A remote command execution vulnerability has been reported in Symantec Web Gateway. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious HTTP request containing a specially crafted parameter to the target server...
Symantec Web Gateway Login Utility
This module will attempt to authenticate to a Symantec Web Gateway. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/symantecwebgateway' require...
Symantec Web Gateway 5 restore.php Command Injection Exploit
This Metasploit module exploits a command injection vulnerability found in Symantec Web Gateway's setting restoration feature. The filename portion can be used to inject system commands into a syscall function, and gain control under the context of HTTP service. For Symantec Web Gateway 5.1.1, yo...
Symantec Web Gateway 5 restore.php Command Injection
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Symantec Web Gateway 5 restore.php Post Authentication Command Injection", 'Description' = %q This module exploits a command injecti...
Symantec-Web-Gateway-5.0.3.18
06 Jun 2012: Vulnerability reported to CERT 08 Jun 2012: Response received from CERT with disclosure date set to 20 Jul 2012 26 Jun 2012: Email received from Symantec for additional information 26 Jun 2012: Additional proofs of concept sent to Symantec 06 Jul 2012: Update received from Symantec...
[KIS-2014-19] Symantec Web Gateway <= 5.2.1 (restore.php) OS Command Injection Vulnerability
------------------------------------------------------------------------------ Symantec Web Gateway = 5.2.1 restore.php OS Command Injection Vulnerability ------------------------------------------------------------------------------ - Software Link: http://www.symantec.com/web-gateway/ - Affecte...
Symantec Web Gateway 5.2.1 OS Command Injection Vilnerability
Symantec Web Gateway versions 5.2.1 and below suffer from a remote OS command injection vulnerability. ------------------------------------------------------------------------------ Symantec Web Gateway = 5.2.1 restore.php OS Command Injection Vulnerability...
Symantec Web Gateway 5.2.1 OS Command Injection
------------------------------------------------------------------------------ Symantec Web Gateway = 5.2.1 restore.php OS Command Injection Vulnerability ------------------------------------------------------------------------------ - Software Link: http://www.symantec.com/web-gateway/ - Affecte...
Symantec Web Gateway Multiple Vulnerabilities -02 (Dec 2014)
Symantec Web Gateway is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:symantec:webgateway";...
Symantec Web Gateway Multiple Vulnerabilities -01 (Dec 2014)
Symantec Web Gateway is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:symantec:webgateway";...
Symantec Web Gateway Unspecified Remote Command Execution Vulnerability (Dec 2014)
Symantec Web Gateway is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Symantec Web Gateway < 5.2.2 Authenticated OS Command Injection (SYM14-016)
According to its self-reported version number, the remote web server is hosting a version of Symantec Web Gateway prior to version 5.2.2. It is, therefore, affected by a operating system OS command injection vulnerability in an unspecified PHP script which impacts the management console. A remote...
Symantec Web Gateway < 5.2.2 Command Injection Vulnerability
Symantec Web Gateway is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Design/Logic Flaw
The management console on the Symantec Web Gateway SWG appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts...
CVE-2014-7285
The management console on the Symantec Web Gateway SWG appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts...