CVE-2014-1652

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec Web Gateway SWG before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters...

Command injection

SNMPConfig.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec Web Gateway SWG before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters...

Sql injection

SQL injection vulnerability in user.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5017

Symantec Web Gateway (SWG) prior to 5.2.1 is affected by CVE-2013-5017 due to a command injection vulnerability in SNMPConfig.php that can lead to remote code execution. The issue is described across multiple sources as affecting the management console and enabling arbitrary command execution, po...

CVE-2013-5017

SNMPConfig.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-1651

SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-1650

SQL injection vulnerability in user.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-1652

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec Web Gateway SWG before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters...

CVE-2014-1651

CVE-2014-1651 affects Symantec Web Gateway (SWG) management console: SQL injection in clientreport.php allows a remote attacker to execute arbitrary SQL commands before version 5.2. The issue is tied to improper input handling (hostname parameter). Remediation per SYM14-010 is to upgrade to SWG 5...

CVE-2014-1650

CVE-2014-1650 : Symantec Web Gateway (SWG) management console contains a SQL injection in the file user.php prior to version 5.2.1. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. The issue is addressed in SWG 5.2.1, which should be d...

CVE-2014-1652

Symantec Web Gateway (SWG) management console prior to 5.2 is affected by CVE-2014-1652: multiple cross-site scripting vulnerabilities allow remote authenticated users to inject script via unspecified report parameters (e.g., entSummary.php, custom_report.php, host_spy_report.php, repairedclients...

CVE-2013-5017: Undefined Security Weakness

SNMPConfig.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors...

McAfee Web Gateway < 7.1.0.5 / 7.1.5.2 XSS

The remote host has a version of McAfee Web Gateway MWG prior to 7.1.0.5 / 7.1.5.2. It is, therefore, reportedly affected by an unspecified cross-site scripting vulnerability in the web UI. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

PT-2014-2898

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2.1 Description The issue allows remote attackers to execute arbitrary commands. This is related to a command injection vulnerability in the SNMPConfig.php file within the management console...

CVE-2014-1652: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec Web Gateway SWG before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters...

PT-2014-4281

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the management console of Symantec Web Gateway. These vulnerabilities allow remote authenticated users to inject...

PT-2014-4279

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via unspecified vectors in the user.php file of the management console. Recommendation...

CVE-2014-1651: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...