817 matches found
Symantec Web Gateway 5.0.3.18 Blind SQL Injection
!/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url =...
Symantec Web Gateway 5.0.3.18 (deptUploads_data.php) Blind SQL Injection Vulnerability
Exploit for php platform in category web applications !/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url ...
Symantec Web Gateway 5.0.3.18 - deptUploads_data.php?groupid Blind SQL Injection
Symantec Web Gateway 5.0.3.18 - deptUploadsdata.php?groupid Blind SQL Injection !/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg glob...
Symantec Web Gateway 5.0.3.18 - 'deptUploads_data.php?groupid' Blind SQL Injection
!/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url =...
Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection
Exploit for linux platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Symantec Web...
Symantec Web Gateway 5.0.2.18 - 'pbcontrol.php' Command Injection (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Symantec Web...
Symantec Web Gateway Remote Shell Command Execution Vulnerability
Symantec Web Gateway is prone to a vulnerability that can allow an attacker to execute arbitrary commands. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit
Exploit for linux platform in category remote exploits !/usr/bin/python import urllib import sys ''' print " " print " Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit" print " Offensive Security - http://www.offensive-security.com" print " \n" 06 Jun 2012: Vulnerability reported to...
Symantec Web Gateway 5.0.3.18 - pbcontrol.php Root Remote Code Execution
Symantec Web Gateway 5.0.3.18 - pbcontrol.php Root Remote Code Execution !/usr/bin/python import urllib import sys ''' print " " print " Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit" print " Offensive Security - http://www.offensive-security.com" print " \n" 06 Jun 2012:...
Symantec Web Gateway 5.0.3.18 - LocalRemote File Inclusion Remote Command Execution
Symantec Web Gateway 5.0.3.18 - LocalRemote File Inclusion Remote Command Execution !/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obta...
Symantec Web Gateway 5.0.3.18 LFI / Command Execution
!/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obtain a root shell using a different LFI vulnerability. Timeline: 06 Jun 2012:...
Symantec Web Gateway Local File Manipulation Authentication Bypass Vulnerability
Symantec Web Gateway is prone to a local authentication-bypass vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Symantec Web Gateway Multiple Vulnerabilities
Symantec Web Gateway is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:symantec:webgateway";...
Symantec Web Gateway contains multiple vulnerabilities
Overview The Symantec Web Gateway management console is vulnerable to remote command execution, local file inclusion, arbitrary password changes, and SQL injection. Description The Symantec SYM12-011 advisory states:"Symantec's Web Gateway management console is susceptible to multiple security...
Symantec Web Gateway 5.0.3.18 - Local/Remote File Inclusion / Remote Command Execution
!/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obtain a root shell using a different LFI vulnerability. Timeline: 06 Jun 2012:...
Symantec Web Gateway 5.0.3.18 - 'pbcontrol.php' Root Remote Code Execution
!/usr/bin/python import urllib import sys ''' print " " print " Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit" print " Offensive Security - http://www.offensive-security.com" print " \n" 06 Jun 2012: Vulnerability reported to CERT 08 Jun 2012: Response received from CERT with...
CVE-2012-2953
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts...
CVE-2012-2574
SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to a "blind SQL injection" issue...