Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-4882.
AI-analyzed exploit summary This document details multiple post-authentication vulnerabilities in McAfee ePO 4.6.6, including SQL injection and reflected XSS. It provides specific HTTP request examples demonstrating the vulnerabilities but does not include functional exploit code.
Description
Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/showRegisteredTypeDetails.do and (2) EPOAGENTMETA/DisplayMSAPropsDetail.do, a different vulnerability than CVE-2013-0140.
Exploits (1)
This document details multiple post-authentication vulnerabilities in McAfee ePO 4.6.6, including SQL injection and reflected XSS. It provides specific HTTP request examples demonstrating the vulnerabilities but does not include functional exploit code.