CVE-2012-2957

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue...

CVE-2012-2976

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue...

CVE-2012-2977

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application script...

Code injection

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application script...

Sql injection

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to a "blind SQL injection" issue...

Design/Logic Flaw

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue...

Design/Logic Flaw

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts...

Design/Logic Flaw

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue...

Sql injection

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-2574

Symantec Web Gateway 5.0.x is affected by CVE-2012-2574 (blind SQL injection) in the management console, enabling remote execution of arbitrary SQL commands and access to the backend database. Affected versions are before 5.0.3.18; remediation per advisories is to apply the update to 5.0.3.18 or ...

CVE-2012-2961

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-2977

CVE-2012-2977 affects Symantec Web Gateway 5.0.x up to but not including 5.0.3.18. The vulnerability allows remote attackers to change arbitrary passwords via crafted input to an application script in the management console. Documented references include NVD entry and multiple third-party advisor...

CVE-2012-2977

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application script...

CVE-2012-2957

Symantec Web Gateway 5.0.x (pre-5.0.3.18) contains a local file inclusion vulnerability that allows privilege escalation by modifying local files in the management console. Affected product versions are before 5.0.3.18; remediation is to apply the vendor update/patch to 5.0.3.18 or newer per the ...

CVE-2012-2953

Symantec Web Gateway 5.0.x prior to 5.0.3.18 contains a remote command injection vulnerability in pbcontrol.php (pbcontrol/api handling). Input to pbcontrol.php can be unsafely passed to an exec() path, enabling remote code execution with web server privileges. The CVE is CVE-2012-2953. Public re...

CVE-2012-2953

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts...

CVE-2012-2961

The CVE-2012-2961 issue affects Symantec Web Gateway, specifically the management console. A SQL injection vulnerability in the gateway’s web interface (notably via search.php and related DB utilities) allowed remote, unauthenticated attackers to execute arbitrary SQL against the backend database...

CVE-2012-2976

Symantec Web Gateway is affected by CVE-2012-2976: the management console in 5.0.x up to 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts (injection). Connected sources corroborate a remote command execution/Vulnerabilities in the SYM12...

CVE-2012-2957

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue...

CVE-2012-2574

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to a "blind SQL injection" issue...