CVE-2011-0545

Symantec LiveUpdate Administrator < 2.3 - Cross-Site Request Forgery via adduser.do

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-0545. PoCs published by Nikolas Sotiriu.

AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in Symantec LiveUpdate Administrator, allowing an attacker to inject HTML/JavaScript or add an admin user via a crafted payload. The script sets up a local server to serve malicious HTML when the victim accesses a specific URL.

Description

Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts, and possibly have unspecified other impact, via the userRole parameter.

Exploits (1)

exploitdb WORKING POC
by Nikolas Sotiriu · textwebappswindows
https://www.exploit-db.com/exploits/17026

This exploit demonstrates a CSRF vulnerability in Symantec LiveUpdate Administrator, allowing an attacker to inject HTML/JavaScript or add an admin user via a crafted payload. The script sets up a local server to serve malicious HTML when the victim accesses a specific URL.

Classification
Working Poc 95%
Attack Type
Xss
Complexity
Moderate
Reliability
Reliable
Target: Symantec LiveUpdate Administrator
No auth needed
Prerequisites: Victim must access a crafted URL · Attacker must host a malicious server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (10)

Core 10
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43820
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/66213
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/71261
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/17026
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8160
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0727
Exploit vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025242
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/517109/100/0/threaded

Scores

EPSS 0.0294
EPSS Percentile 85.3%

Details

CWE
CWE-352
Status published
Products (1)
symantec/liveupdate_administrator 2.2.2.9
Published Mar 28, 2011
Tracked Since Feb 18, 2026