Radlsneak

Researcher fromiSIGHT Partners Global Vulnerability Partnership

#18648of 60,572

16.8Total CVSS

Vulnerabilities · 2

High

2

Windows Messenger Activex Control

A remote code execution issue exists in the Microsoft Windows Messenger ActiveX Control, allowing attackers to execute arbitrary code by constructing a specially crafted Web page. When a user views the Web page, the issue could allow remote code execution, potentially giving the attacker the same user rights as the logged-on user.

Symantec Web Gateway

The issue allows remote attackers to execute arbitrary SQL commands via the `USERNAME` parameter in the login.php file of the GUI management console. This can lead to remote code execution.