CVE-2012-0296

Multiple cross-site scripting XSS vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0296

Affected product/versions: Symantec Web Gateway 5.0.x (before 5.0.3). Vulnerability type: multiple cross-site scripting (XSS) in the management GUI. Root cause/factors: unsanitized/insufficient input validation in the web interface (e.g., timer.php l parameter). Impact: remote attacker could inje...

Symantec Web Gateway timer.php XSS (SYM12-006)

The remote web server is hosting a version of Symantec Web Gateway that is vulnerable to cross-site scripting attacks. Input to the 'l' parameter of timer.php is not properly sanitized. An attacker could exploit this by tricking a user into making a malicious request, resulting in arbitrary scrip...