CVE-2014-7285

Description

References

• karmainsecurity.com/KIS-2014-19
• osvdb.org/show/osvdb/116009
• packetstormsecurity.com/files/130612/Symantec-Web-Gateway-5-restore.php-Command-Injection.html
• exploit-db.com/exploits/36263
• securityfocus.com/bid/71620
• securitytracker.com/id/1031386
• symantec.com/security_response/securityupdates/detail.jsp · Vendor Advisory

web gateway 的其他漏洞

• CVE-2016-5313高危 8.8Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands.
• CVE-2015-6548中危 5.8Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software befo…
• CVE-2015-6547高危 8.3The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users t…
• CVE-2015-5693高危 7.9The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users t…
• CVE-2015-5692高危 7.9admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote…