CVE-2014-9618 PoC — Netsweeper 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9618.yaml

Associated Vulnerability

Title:Netsweeper 安全漏洞 (CVE-2014-9618)
Description:Netsweeper是加拿大Netsweeper公司的一套Web内容过滤解决方案。Client Filter Admin portal是其中的一个过滤器管理程序。 Netsweeper 3.1.10之前的版本、4.0.9之前的4.0.x版本和4.1.2之前的4.1.x版本中的Client Filter Admin portal存在安全漏洞。远程攻击者可利用该漏洞绕过身份验证，创建任意的配置文件。

Description

The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.

File Snapshot


 id: CVE-2014-9618

info:
  name: Netsweeper - Authentication Bypass
  author: daffainfo
  severity: 

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!