CVE-2012-0285 and CVE-2012-0286 - Stoneware webNetwork6 Vulnerability
January 23, 2012
Authors: Gimppy042
# Exploit Title: Stoneware WebNetwork6 CSRF and Persistent XSS
# Date: Discovered and reported 11/2011
# Author: Gimppy042
# Software Link: Stoneware INC, WebNetwork6 (www.stone-ware.com)
# Version: Any/All versions are vulnerable prior to 6.8.0 (Service Pack 8 install)
# CVE : CVE-2012-0285 for all of the XSS issues, and CVE-2012-0286 for the CSRF
Check it out. Was my first ever reported zero day vulnerabilities. I submitted my report today to have my CVE numbers updated and taken out of candidate status.
This vulnerability was just released to the public today. Vulns covered in report were Zero Day until patch went live this week.
January 23, 2012
Authors: Gimppy042
# Exploit Title: Stoneware WebNetwork6 CSRF and Persistent XSS
# Date: Discovered and reported 11/2011
# Author: Gimppy042
# Software Link: Stoneware INC, WebNetwork6 (www.stone-ware.com)
# Version: Any/All versions are vulnerable prior to 6.8.0 (Service Pack 8 install)
# CVE : CVE-2012-0285 for all of the XSS issues, and CVE-2012-0286 for the CSRF
Check it out. Was my first ever reported zero day vulnerabilities. I submitted my report today to have my CVE numbers updated and taken out of candidate status.
This vulnerability was just released to the public today. Vulns covered in report were Zero Day until patch went live this week.