Code injection

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors...

DSquare Exploit Pack: D2SEC_SYMWEBGW

Name| d2secsymwebgw ---|--- CVE| CVE-2012-0297 Exploit Pack| D2ExploitPack Description| Symantec Web Gateway 5.0.2 Local File Include Vulnerability Notes|...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to 1 read or 2 delete arbitrary files via unspecified vectors...

CVE-2012-0298

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to 1 read or 2 delete arbitrary files via unspecified vectors...

CVE-2012-0299

CVE-2012-0299 affects Symantec Web Gateway 5.0.x (pre-5.0.3) where file-management scripts in the management GUI allow remote upload of arbitrary code to a designated pathname, potentially enabling remote code execution. This is evidenced by multiple sources in the connected data, including NVD d...

CVE-2012-0297

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by 1 injecting crafted data or 2 including crafted data...

CVE-2012-0296

Multiple cross-site scripting XSS vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0298

CVE-2012-0298 affects Symantec Web Gateway before 5.0.3. The management GUI file-management scripts allow remote attackers to read or delete arbitrary files via directory traversal vectors (noted for the relfile parameter). Affected product/version: Symantec Web Gateway 5.0.x up to 5.0.2.x. Impac...

CVE-2012-0296

Affected product/versions: Symantec Web Gateway 5.0.x (before 5.0.3). Vulnerability type: multiple cross-site scripting (XSS) in the management GUI. Root cause/factors: unsanitized/insufficient input validation in the web interface (e.g., timer.php l parameter). Impact: remote attacker could inje...

CVE-2012-0299

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors...

CVE-2012-0297

Symantec Web Gateway 5.0.x (pre-5.0.3) exposes a remote command injection/remote code execution vulnerability in the HTTP service (spywall/ipchange.php and related endpoints). The core issue is improper input handling and insecure usage of server-side scripts that allows an attacker to inject or ...

PT-2012-2475

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x through 5.0.2 Description The issue allows remote attackers to upload arbitrary code to a designated pathname and possibly execute this code via unspecified vectors. This is related to the file-management...

CVE-2012-0298: Undefined Security Weakness

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to 1 read or 2 delete arbitrary files via unspecified vectors...

PT-2012-2474

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x through 5.0.2 Description The issue concerns the file-management scripts in the management GUI, allowing remote attackers to read or delete arbitrary files. Recommendations For Symantec Web Gateway versions...

Symantec Web Gateway upload_file Remote Code Execution Vulnerability

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported:...

CVE-2012-0299: Undefined Security Weakness

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors...

PT-2012-2472

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x before 5.0.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the management GUI. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via...

PT-2012-2473

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x through 5.0.2 Description The management GUI in Symantec Web Gateway does not properly restrict access to application scripts. This allows remote attackers to execute arbitrary code by either injecting craft...

CVE-2012-0297: Undefined Security Weakness

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by 1 injecting crafted data or 2 including crafted data...