CVE-2016-9834

Summary: CVE-2016-9834 is an XSS vulnerability affecting Sophos Cyberoam firewall devices up to firmware 10.6.4. The flaw is in the handling of LiveConnectionDetail.jsp; GET parameters “applicationname” and “username” are not properly sanitized, enabling injection of arbitrary JavaScript into the...

Sophos Cyberoam Cross Site Scripting

Title: ==== Sophos Cyberoam Cross-site scripting XSS vulnerability Credit: ====== Name: Bhadresh Patel Date: ==== 25/05/2017 dd/mm/yyyy Vendor: ====== More than 100 million users in 150 countries rely on Sophos to offer end-to-end protection against complex threats and data loss. Sophos is...

Sophos Cyberoam - Cross-site scripting

Exploit Title: Sophos Cyberoam – Cross-site scripting XSS vulnerability Date: 25/05/2017 Exploit Author: Bhadresh Patel Version: = Firmware Version 10.6.4 CVE : CVE-2016-9834 This is an article with video tutorial for Sophos Cyberoam – Cross-site scripting XSS vulnerability...