AlgoSec Firewall Analyzer – Cross-Site Scripting

Exploit Database
11 阅读

作者： Asheesh kumar Mani Tripathi

日期： 2013-08-16
类别：
- remote
平台：
- hardware
来源：https://www.exploit-db.com/exploits/38692/

source: https://www.securityfocus.com/bid/61733/info

AlgoSec Firewall Analyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

AlgoSec Firewall Analyzer 6.1-b86 is affected; other versions may also be vulnerable. 

http//www.example.com/afa/php/Login.php/>'><ScRiPt>alert(11111111)</ScRiPt> HTTP/1.1

last Exploits
AlgoSec Firewall Analyzer – Cross-Site Scripting的更多信息

Sync Breeze Enterprise 9.5.16 – ‘GET’ Remote Buffer Overflow (SEH)：
eDirectory 8.7.3 – iMonitor Remote Stack Buffer Overflow (Metasploit)：
Accellion File Transfer Appliance MPIPE2 – Command Execution (Metasploit)：
Sun Java Applet2ClassLoader – Remote Code Execution (Metasploit)：
RAVPower 2.000.056 – Root Remote Code Execution：
KeyHelp – ActiveX LaunchTriPane Remote Code Execution (Metasploit)：
IBM Rational ClearQuest CQOle – Remote Code Execution (Metasploit)：
Dell SonicWALL Scrutinizer 9 – SQL Injection (Metasploit)：