Exploitation Summary
EIP tracks 3 public exploits for CVE-2012-2953.
PoCs published by Metasploit, muts, muts, sinn3r, including Metasploit module exploits/linux/http/symantec_web_gateway_pbcontrol.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Symantec Web Gateway 5.0.2.18 via the 'filename' parameter in pbcontrol.php, allowing remote code execution without authentication.
Description
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts.
Exploits (3)
This Metasploit module exploits a command injection vulnerability in Symantec Web Gateway 5.0.2.18 via the 'filename' parameter in pbcontrol.php, allowing remote code execution without authentication.
This exploit targets a command injection vulnerability in Symantec Web Gateway 5.0.3.18 via the pbcontrol.php script. It crafts a malicious URL to execute a reverse shell payload, leveraging sudo to achieve root-level remote code execution.
This Metasploit module exploits a command injection vulnerability in Symantec Web Gateway 5.0.2.18 via the `filename` parameter in `pbcontrol.php`, allowing remote code execution without authentication.