McAfee Network Security Manager < 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities

ExploitDBExploitDB exploitWriteupEDB-10061

PoC files

1 file

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

ExploitDB
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

The artifact is a brief technical writeup describing multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6. It explains the attack vector and provides two example malicious URIs that inject JavaScript via the 'iaction' and 'node' parameters in Login.jsp, but contains no executable exploit or scanner code.

Backdoor review

No backdoor observed in reviewed code

The artifact is a plaintext description of two cross-site scripting (XSS) proof-of-concept URIs targeting McAfee Network Security Manager. It contains no executable code, no obfuscation, no concealed payloads, and no instructions for the reader to perform any action beyond viewing the example URIs. The content is consistent with a standard public exploit disclosure.

ClassificationWriteup
Model confidence95%
AuthenticationNot required
Languagesenglish
Target softwareMcAfee IntruShield Network Security Manager
Attack typescross-site scripting (xss)
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact contains only a textual description of the vulnerability and example URIs; it lacks any executable code, automated detection logic, or exploitation mechanism, making it a writeup rather than an exploit or scanner.

exploits/jsp/webapps/10061.txt:1-7

Requirements

  • Victim must follow a malicious URIexploits/jsp/webapps/10061.txt:1

Observed behavior

  • Provides example URIs that inject JavaScript via iaction and node parametersexploits/jsp/webapps/10061.txt:5-7
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Xss Payload
"><script>alert('XSS')</script>Example XSS payload injected into the 'iaction' parameter of a Login.jsp URI.exploits/jsp/webapps/10061.txt:5
Xss Payload
"><script>alert(1)</script>Example XSS payload injected into the 'node' parameter of a Login.jsp URI.exploits/jsp/webapps/10061.txt:7
Review boundaries

What the analysis did not establish

  • Evidence is limited to the single text file; no external tools, libraries, or referenced resources are included.
  • The artifact is a static description; no dynamic behavior or execution context is available.
  • Only the supplied text file was reviewed; no external resources or linked URIs were fetched or analyzed.
  • The review does not assess the validity or effectiveness of the XSS payloads against the target application.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Linked vulnerabilities

1