EUVD-2012-2432

Malware in sbrugna...

EUVD-2012-2433

Malware in sbrugna...

Netsweeper WebAdmin unixlogin.php Python Code Injection

This module exploits a Python code injection in the Netsweeper WebAdmin component's unixlogin.php script, for versions 6.4.4 and prior, to execute code as the root user. Authentication is bypassed by sending a random whitelisted Referer header in each request. Tested on the CentOS Linux-based...

Netsweeper WebAdmin Portal Multiple Vulnerabilities

No description provided by source...

CVE-2012-2447

Cross-site request forgery CSRF vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via an add action...

PT-2012-4050

Name of the Vulnerable Software and Affected Versions Netsweeper WebAdmin Portal affected versions not specified Description A cross-site request forgery CSRF issue exists in the accountmgr/adminupdate.php file of the WebAdmin Portal. This allows remote attackers to hijack the authentication of...