Sql injection

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Code injection

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application script...

CVE-2012-2976

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue...

CVE-2012-2953

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts...

CVE-2012-2976

Symantec Web Gateway is affected by CVE-2012-2976: the management console in 5.0.x up to 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts (injection). Connected sources corroborate a remote command execution/Vulnerabilities in the SYM12...

CVE-2012-2977

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application script...

CVE-2012-2574

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to a "blind SQL injection" issue...

CVE-2012-2961

The CVE-2012-2961 issue affects Symantec Web Gateway, specifically the management console. A SQL injection vulnerability in the gateway’s web interface (notably via search.php and related DB utilities) allowed remote, unauthenticated attackers to execute arbitrary SQL against the backend database...

CVE-2012-2953

Symantec Web Gateway 5.0.x prior to 5.0.3.18 contains a remote command injection vulnerability in pbcontrol.php (pbcontrol/api handling). Input to pbcontrol.php can be unsafely passed to an exec() path, enabling remote code execution with web server privileges. The CVE is CVE-2012-2953. Public re...

CVE-2012-2574

Symantec Web Gateway 5.0.x is affected by CVE-2012-2574 (blind SQL injection) in the management console, enabling remote execution of arbitrary SQL commands and access to the backend database. Affected versions are before 5.0.3.18; remediation per advisories is to apply the update to 5.0.3.18 or ...

CVE-2012-2961

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-2977

CVE-2012-2977 affects Symantec Web Gateway 5.0.x up to but not including 5.0.3.18. The vulnerability allows remote attackers to change arbitrary passwords via crafted input to an application script in the management console. Documented references include NVD entry and multiple third-party advisor...

CVE-2012-2957

Symantec Web Gateway 5.0.x (pre-5.0.3.18) contains a local file inclusion vulnerability that allows privilege escalation by modifying local files in the management console. Affected product versions are before 5.0.3.18; remediation is to apply the vendor update/patch to 5.0.3.18 or newer per the ...

CVE-2012-2957

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue...

Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers

Exploit for php platform in category web applications Exploit Title: Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.3.18 Vendor URL: http://www.symantec.com Timeline: 12 Jun 2012: Vulnerability reported to CERT...

Symantec Web Gateway 5.0.3.18 - Blind SQL Injection Backdoor via MySQL Triggers

Symantec Web Gateway 5.0.3.18 - Blind SQL Injection Backdoor via MySQL Triggers Exploit Title: Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.3.18 Vendor URL: http://www.symantec.com Timeline: 12 Jun 2012:...

Symantec Web Gateway 5.0.3.18 Blind SQL Injection

Exploit Title: Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.3.18 Vendor URL: http://www.symantec.com Timeline: 12 Jun 2012: Vulnerability reported to CERT 22 Jun 2012: Response received from CERT with...

Symantec Web Gateway 5.0.2 Blind SQL Injection

!/usr/bin/python Exploit Title: Symantec Web Gateway 5.0.2 blocked.php id parameter Blind SQL Injection Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.2 Vendor URL: http://www.symantec.com Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from...

Symantec Web Gateway 5.0.2 - 'blocked.php?id' Blind SQL Injection

!/usr/bin/python Exploit Title: Symantec Web Gateway 5.0.2 blocked.php id parameter Blind SQL Injection Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.2 Vendor URL: http://www.symantec.com Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from...

Symantec Web Gateway 5.0.2 (blocked.php id parameter) Blind SQL Injection

Exploit for linux platform in category web applications !/usr/bin/python Exploit Title: Symantec Web Gateway 5.0.2 blocked.php id parameter Blind SQL Injection Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.2 Vendor URL: http://www.symantec.com Timeline: 29 May 2012: Vulnerabili...