CVE

Id
76906  
CVE No.
CVE-2014-9605  
Status
Candidate  
Description
WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and create a system backup tarball, restart the server, or stop the filters on the server via a " (single quote) character in the login and password parameters to webupgrade/webupgrade.php. NOTE: this was originally reported as an SQL injection vulnerability, but this may be inaccurate.  
Phase
Assigned (20150116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
705768 76906 CVE-2014-9605 EXPLOIT-DB:37928  View
705769 76906 CVE-2014-9605 URL:https://www.exploit-db.com/exploits/37928/  View
705770 76906 CVE-2014-9605 CONFIRM:https://helpdesk.netsweeper.com/docs/3.1/release_notes/netsweeper_releasenotes/3_1_10_0_release_notes/3.1.10_release_notes.htm  View
705771 76906 CVE-2014-9605 CONFIRM:https://helpdesk.netsweeper.com/docs/4.0/release_notes/netsweeper_releasenotes/4_0_9_release_notes/4.0.9_release_notes.htm  View

Related JVN