CVE-2015-20130— Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php

Quick assessment

Affected

Netsweeper Netsweeper

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Netsweeper 4.0.11 之前的版本以及 4.1.0 至 4.1.5（不含 4.1.5）的版本中，webadmin/reporter/view_server_log.php 文件存在反射型跨站脚本（XSS）漏洞。该漏洞允许远程攻击者通过日志请求参数注入恶意代码，由于该参数在 HTML 响应中未经输出编码即被直接反射，攻击者可构造恶意 URL 并诱导用户访问，从而在受害者的浏览器会话中针对 Netsweeper 网络管理界面执行任意 JavaScript 代码。Shadowserver Foundation

CVSS 6.1 · Medium Updated Oct 30, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php

Source: CVE Program / CVE List V5

Vulnerability Description

Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the log request parameter, which is reflected into the HTML response without output encoding. Attackers can craft a malicious URL and induce a user to request it, resulting in arbitrary JavaScript execution within the victim's browser session against the Netsweeper web administration interface. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Netsweeper	Netsweeper	0 ~ 4.0.11	-

II. Public POCs for CVE-2015-20130

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2015-20130

请登录查看更多情报信息。

Other References for CVE-2015-20130 (5)

https://www.exploit-db.com/exploits/37930 exploit
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/netsweeper/netsweeper-rxss.yaml technical-description
https://www.netsweeper.com/ product
http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html exploit
https://www.vulncheck.com/advisories/netsweeper-reflected-xss-via-view-server-log-php third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2015-20130

IV. Related Vulnerabilities

Same weakness: CWE-79