Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-3859. PoCs published by Jacob Holcomb.
AI-analyzed exploit summary This exploit demonstrates CSRF, reflective XSS, and SQL injection vulnerabilities in Netsweeper WebAdmin Portal. The CSRF creates an admin account, the XSS triggers via POST request, and the SQLi occurs in the sortorder and sortitem parameters.
Description
Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulnerability than CVE-2012-2446 and CVE-2012-2447.
Exploits (1)
This exploit demonstrates CSRF, reflective XSS, and SQL injection vulnerabilities in Netsweeper WebAdmin Portal. The CSRF creates an admin account, the XSS triggers via POST request, and the SQLi occurs in the sortorder and sortitem parameters.