ID de Prueba:	1.3.6.1.4.1.25623.1.0.804406
Categoría:	Web application abuses
Título:	Symantec Web Gateway Cross-Site Scripting and SQL Injection Vulnerabilities
Resumen:	Symantec Web Gateway is prone to cross-site scripting and SQL injection vulnerabilities.
Descripción:	Summary: Symantec Web Gateway is prone to cross-site scripting and SQL injection vulnerabilities. Vulnerability Insight: Flaws are due to: - Certain unspecified input is not properly sanitised before being returned to the user. - An input passed via the 'operand[]' parameter to /spywall/blacklist.php is not properly sanitised before being returned to the user. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code in the context of the application, bypass certain security restrictions and conduct SQL injection attacks. Affected Software/OS: Symantec Web Gateway versions prior to 5.2 Solution: Upgrade to Symantec Web Gateway 5.2 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-5012 BugTraq ID: 65404 http://www.securityfocus.com/bid/65404 Common Vulnerability Exposure (CVE) ID: CVE-2013-5013 BugTraq ID: 65405 http://www.securityfocus.com/bid/65405 http://osvdb.org/103144 http://osvdb.org/103145 http://osvdb.org/103147
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.