Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change (Metasploit)

@Kc57 Symantec Web Gateway "Symantec Web Gateway %q This module will change the password for the specified account on a Symantec Web Gatewaye server. , 'License' = MSFLICENSE, 'Version' = "$Revision: 0 $", 'Author' = 'Kc57', , 'References' = 'CVE', '2012-2977' , 'OSVDB', '0' , 'BID', '54430' ,...

Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change

!/usr/bin/python import urllib import urllib2 import re import sys print " " print " Symantec Web Gateway " exit0 ip = sys.argv1 username = sys.argv2 password = sys.argv3 url = "https://%s/spywall/temppassword.php" % ip opts = 'target':'executivesummary.php', 'USERNAME':username,...

Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change

Exploit for linux platform in category web applications !/usr/bin/python import urllib import urllib2 import re import sys print " " print " Symantec Web Gateway " exit0 ip = sys.argv1 username = sys.argv2 password = sys.argv3 url = "https://%s/spywall/temppassword.php" % ip opts =...

Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change (MSF)

Exploit for linux platform in category web applications @Kc57 Symantec Web Gateway "Symantec Web Gateway %q This module will change the password for the specified account on a Symantec Web Gatewaye server. , 'License' = MSFLICENSE, 'Version' = "$Revision: 0 $", 'Author' = 'Kc57', , 'References' =...

Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change

Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change !/usr/bin/python import urllib import urllib2 import re import sys print " " print " Symantec Web Gateway " exit0 ip = sys.argv1 username = sys.argv2 password = sys.argv3 url = "https://%s/spywall/temppassword.php" % ip opts =...

Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change (Metasploit)

Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change Metasploit @Kc57 Symantec Web Gateway "Symantec Web Gateway %q This module will change the password for the specified account on a Symantec Web Gatewaye server. , 'License' = MSFLICENSE, 'Version' = "$Revision: 0 $", 'Author' = 'Kc57', ,...

Code injection

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI...

CVE-2012-3294: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier, and WebSphere MQ - Managed File Transfer 7.5, allow remote attackers to hijack the authentication of arbitrary users for requests that 1 add user...

CVE-2012-2206: Undefined Security Weakness

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI...

IBM WebSphere MQ File Transfer Edition Web Gateway CSRF Vulnerability

Exploit for php platform in category web applications Exploit Author: Nir Valtman Description: Malicious user is able to add userspace, change permissions on existing userspace and add MQMD MQ Message Descriptor user IDs. All of the these vulnerabilities can be exploited using a CSRF Cross Site...

IBM Websphere MQ File Transfer Edition Web Gateway - Cross-Site Request Forgery

IBM Websphere MQ File Transfer Edition Web Gateway - Cross-Site Request Forgery Exploit Author: Nir Valtman Description: Malicious user is able to add userspace, change permissions on existing userspace and add MQMD MQ Message Descriptor user IDs. All of the these vulnerabilities can be exploited...

IBM WebSphere MQ File Transfer Edition Web Gateway CSRF

Exploit Author: Nir Valtman Description: Malicious user is able to add userspace, change permissions on existing userspace and add MQMD MQ Message Descriptor user IDs. All of the these vulnerabilities can be exploited using a CSRF Cross Site Request Forgery attack. Few days ago the CVE has been...

CVE-2012-4178

SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...

Sql injection

SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...

CVE-2012-4178

The CVE-2012-4178 entry affects Symantec Web Gateway 5.0.3.18, with an SQL injection in spywall/includes/deptUploads_data.php exploitable via the groupid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) w...

CVE-2012-4178

SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...

CVE-2012-4178: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...

PT-2012-5222

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway version 5.0.3.18 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the groupid parameter in the spywall/includes/deptUploads data.php file. Recommendations...

Symantec Web Gateway Multiple Script Shell Command Execution (SYM12-011)

The Symantec Web Gateway install on the remote host is affected by a remote shell command execution vulnerability due to its failure to sanitize input to the 'ip' parameter of the 'fromha.php' script. An unauthenticated, remote attacker can exploit this vulnerability to save a random PHP script o...

Symantec Web Gateway search.php SQL Injection (SYM12-011)

The remote web server is hosting a version of Symantec Web Gateway that is affected by a SQL injection vulnerability. The vulnerability is in includes/dbutils.php, and is exploitable via search.php. A remote, unauthenticated attacker could exploit this to execute arbitrary database queries. Note...