cve/2014/CVE-2014-9611.md

CVE-2014-9611

Description

Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php.

POC

Reference

• http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
• https://www.exploit-db.com/exploits/37931/

Github

No PoCs found on GitHub currently.