← voltar
CVE-2011-1524

CVE-2011-1524

EPSS 4.2%
Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different vulnerability than CVE-2011-0545.
Produtos afetados
n/a · n/a
PoCs públicas encontradas — 2
cve_referencewww.exploit-db.com/exploits/17026não verificadoexploitdbwww.exploit-db.com/exploits/17026não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://securityreason.com/securityalert/8166http://securitytracker.com/id?1025242https://exchange.xforce.ibmcloud.com/vulnerabilities/66213http://sotiriu.de/adv/NSOADV-2011-001.txthttp://www.exploit-db.com/exploits/17026http://www.securityfocus.com/archive/1/517109/100/0/threadedhttp://www.securityfocus.com/bid/46856http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00http://www.vupen.com/english/advisories/2011/0727