CVE-2009-3036 PoC — Symantec IM Manager控制台跨站脚本攻击漏洞

Source

https://github.com/brinhosa/CVE-2009-3036

Associated Vulnerability

Title: Symantec IM Manager控制台跨站脚本攻击漏洞 (CVE-2009-3036)
Description:Cross-site scripting (XSS) vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before 8.4.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Readme

# CVE-2009-3036
#SpeeDr00t@Black Falcon<br>#bid38241<p><b><span style="font-size: 18pt;">Symantec IM Manager Console HTML Injection Vulnerability</span></b></p><br><br><a href="http://www.securityfocus.com/bid/38241/info">info</a><br><a href="http://www.securityfocus.com/bid/38241/discuss">discussion</a><br><a href="http://www.securityfocus.com/bid/38241/exploit">exploit</a><br><a href="http://www.securityfocus.com/bid/38241/solution">solution</a><br><a href="http://www.securityfocus.com/bid/38241/references">references</a><br><br><br><br><br>#<br>#<div id="vulnerability">
<span class="title"></span><br/><br/>
<table border="0" cellpadding="4" cellspacing="0">
<tr>
<td>
<span class="label">Bugtraq ID:</span>
</td>
<td>
				38241
			</td>
</tr>
<tr>
<td>
<span class="label">Class:</span>
</td>
<td>
				Input Validation Error
			</td>
</tr>
<tr valign="top">
<td>
<span class="label">CVE:</span>
</td>
<td>
				
					CVE-2009-3036<br/>
</td>
</tr>
<tr>
<td>
<span class="label">Remote:</span>
</td>
<td>
				Yes
			</td>
</tr>
<tr>
<td>
<span class="label">Local:</span>
</td>
<td>
				No
			</td>
</tr>
<tr>
<td>
<span class="label">Published:</span>
</td>
<td>
				Feb 18 2010 12:00AM
			</td>
</tr>
<tr>
<td>
<span class="label">Updated:</span>
</td>
<td>
				Feb 18 2010 12:00AM
			</td>
</tr>
<tr>
<td>
<span class="label">Credit:</span>
</td>
<td>
				Rafael B. Brinhosa
			</td>
</tr>
<tr valign="top">
<td>
<span class="label">Vulnerable:</span>
</td>
<td>
				
					Symantec IM Manager  8.4<br/>
					
				
					Symantec IM Manager  8.3<br/>
</td>
</tr>
<tr>
<td colspan="2">
<div class="breakline"></div>
</td>
</tr>
<tr valign="top">
<td>
<span class="label">Not Vulnerable:</span>
</td>
<td>
				
					Symantec IM Manager 8.4.13 <br/>
</td>
</tr>
</table>
</div><br><br>#<br>##no_exploit_link<br><br><br><br>#<br>#<div id="vulnerability">
<span class="title"></span><br/><br/>
	Attackers can exploit this issue with a browser.
	
		<ul>
</ul>
</div>

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →