cve/2014/CVE-2014-9610.md

CVE-2014-9610

Description

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and remove IP addresses from the quarantine via the ip parameter to webadmin/user/quarantine_disable.php.

POC

Reference

• http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
• https://www.exploit-db.com/exploits/37929/

Github

No PoCs found on GitHub currently.