Jacob Holcomb has reported multiple vulnerabilities in Netsweeper, which can be exploited by malicious users to conduct SQL injection attacks and by malicious people to conduct cross-site scripting and request forgery attacks.

1) Input passed via the "group" parameter to webadmin/tools/local_lookup.php (when "action" is set to "lookup") is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. add an administrator by tricking a logged in administrator into visiting a malicious web site.

3) Input passed via the "sortorder" and "sortitem" parameters to webadmin/reporter/view_details.php is not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Solution
No official solution is currently available.

Provided and/or discovered by
Jacob Holcomb via US-CERT.

Changelog
Further details available to Secunia VIM customers

Original Advisory
VU#763795:
http://www.kb.cert.org/vuls/id/763795

Jacob Holcomb:
http://infosec42.blogspot.com/2012/07/cve-2012-2446-cve-2012-2447-cve-2012.html

Deep Links
Links available to Secunia VIM customers