CVE-2012-4178

SQL injection vulnerability in spywall/includes/deptUploadsdata.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter...

CVE-2012-4178

The CVE-2012-4178 entry affects Symantec Web Gateway 5.0.3.18, with an SQL injection in spywall/includes/deptUploads_data.php exploitable via the groupid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) w...

Symantec Web Gateway Multiple Script Shell Command Execution (SYM12-011)

The Symantec Web Gateway install on the remote host is affected by a remote shell command execution vulnerability due to its failure to sanitize input to the 'ip' parameter of the 'fromha.php' script. An unauthenticated, remote attacker can exploit this vulnerability to save a random PHP script o...

Symantec Web Gateway search.php SQL Injection (SYM12-011)

The remote web server is hosting a version of Symantec Web Gateway that is affected by a SQL injection vulnerability. The vulnerability is in includes/dbutils.php, and is exploitable via search.php. A remote, unauthenticated attacker could exploit this to execute arbitrary database queries. Note...

Symantec Web Gateway 5.0.3.18 Blind SQL Injection

!/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url =...

Symantec System Recovery 2011 imapi.dll Path Subversion Arbitrary DLL Injection Code Execution (SYM12-012)

The remote Windows host contains a version of Symantec System Recovery 2011 earlier than Service Pack 2. As such, it is reportedly affected by an insecure library loading vulnerability. If an attacker can trick a user on the affected system into opening a specially crafted file in the Granular...

Symantec Web Gateway 5.0.3.18 (deptUploads_data.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications !/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url ...

Symantec Web Gateway 5.0.3.18 - deptUploads_data.php?groupid Blind SQL Injection

Symantec Web Gateway 5.0.3.18 - deptUploadsdata.php?groupid Blind SQL Injection !/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg glob...

Symantec Web Gateway 5.0.3.18 - 'deptUploads_data.php?groupid' Blind SQL Injection

!/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url =...

Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection

Exploit for linux platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Symantec Web Gateway 5.0.2.18 - 'pbcontrol.php' Command Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Symantec Web...

Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Symantec Web...

Symantec Web Gateway Remote Shell Command Execution Vulnerability

Symantec Web Gateway is prone to a vulnerability that can allow an attacker to execute arbitrary commands. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Symantec Web Gateway 5.0.3.18 - pbcontrol.php Root Remote Code Execution

Symantec Web Gateway 5.0.3.18 - pbcontrol.php Root Remote Code Execution !/usr/bin/python import urllib import sys ''' print " " print " Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit" print " Offensive Security - http://www.offensive-security.com" print " \n" 06 Jun 2012:...

Symantec Web Gateway 5.0.3.18 LFI Remote ROOT RCE Exploit

Exploit for linux platform in category remote exploits !/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obtain a root shell using a...

Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit

Exploit for linux platform in category remote exploits !/usr/bin/python import urllib import sys ''' print " " print " Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit" print " Offensive Security - http://www.offensive-security.com" print " \n" 06 Jun 2012: Vulnerability reported to...

Symantec Web Gateway Multiple Vulnerabilities

Symantec Web Gateway is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:symantec:webgateway";...

Symantec Web Gateway 5.0.3.18 - 'pbcontrol.php' Root Remote Code Execution

!/usr/bin/python import urllib import sys ''' print " " print " Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit" print " Offensive Security - http://www.offensive-security.com" print " \n" 06 Jun 2012: Vulnerability reported to CERT 08 Jun 2012: Response received from CERT with...

Symantec Web Gateway 5.0.3.18 LFI / Command Execution

!/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obtain a root shell using a different LFI vulnerability. Timeline: 06 Jun 2012:...

Symantec Web Gateway 5.0.3.18 - LocalRemote File Inclusion Remote Command Execution

Symantec Web Gateway 5.0.3.18 - LocalRemote File Inclusion Remote Command Execution !/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obta...