{"vulnerability": "cve-2012-0297", "sightings": [{"uuid": "79f920b6-bd9a-4a12-a23a-a663dd09e3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "b0ee64ad-0874-44d6-be94-b91a6ff58b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-06)", "content": "", "creation_timestamp": "2025-01-06T00:00:00.000000Z"}, {"uuid": "8c8fedfc-94db-4183-ba06-2d991e0e9ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-07)", "content": "", "creation_timestamp": "2025-01-07T00:00:00.000000Z"}, {"uuid": "85dd00a1-d4bb-4d0d-94b9-0b219f1865d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-10-24)", "content": "", "creation_timestamp": "2024-10-24T00:00:00.000000Z"}, {"uuid": "f089fc7d-096c-4ab6-a7e9-23d3a2d490cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-30)", "content": "", "creation_timestamp": "2024-11-30T00:00:00.000000Z"}, {"uuid": "b4062fe7-4b59-42af-8c5e-0cc73c610c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-20)", "content": "", "creation_timestamp": "2024-11-20T00:00:00.000000Z"}, {"uuid": "923379bd-1ae0-4220-a7c1-3ab7ae8bbd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-29)", "content": "", "creation_timestamp": "2024-11-29T00:00:00.000000Z"}, {"uuid": "9cdab67e-67b6-4dd3-94c4-148434a0edc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-04)", "content": "", "creation_timestamp": "2024-12-04T00:00:00.000000Z"}, {"uuid": "9e66565b-92f5-4722-ac23-0b9ac6435914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-12-05)", "content": "", "creation_timestamp": "2024-12-05T00:00:00.000000Z"}, {"uuid": "5f2eff0d-b099-42f5-936c-25fcc6e8ac7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:01.000000Z"}, {"uuid": "fc3e1e2d-7cbe-421a-a2f4-9784e9400846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-09)", "content": "", "creation_timestamp": "2025-09-09T00:00:00.000000Z"}, {"uuid": "ff3336df-f1e6-4315-bbfc-a03d179c03e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_web_gateway_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "365fef29-1670-44f1-a811-ba2f6508825c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_web_gateway_lfi.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "95763c49-053f-486b-8e8d-6ca89ef63a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-04)", "content": "", "creation_timestamp": "2025-09-04T00:00:00.000000Z"}, {"uuid": "5360a93e-2dfc-4741-a2ab-42870b8d0e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0297", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/19406", "content": "", "creation_timestamp": "2012-06-27T00:00:00.000000Z"}, {"uuid": "279f302b-8bde-4fe4-8a82-24134690eebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0297", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/19065", "content": "", "creation_timestamp": "2012-06-12T00:00:00.000000Z"}, {"uuid": "e50414ad-2918-4294-b48a-d873e9cc04d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0297", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/18942", "content": "", "creation_timestamp": "2012-05-28T00:00:00.000000Z"}, {"uuid": "de4b9762-b04f-4252-a032-74be4f6f943b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0297", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/18932", "content": "", "creation_timestamp": "2012-05-26T00:00:00.000000Z"}, {"uuid": "b1254725-3b91-4391-9648-e6c835e57953", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a0acc281-2259-484c-99d5-f5223c019220", "content": "", "creation_timestamp": "2026-06-23T14:06:23.710677Z"}, {"uuid": "29136eca-ede6-4e36-a075-205516130a4d", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2012-0297", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1db8ae7-2ad5-4b96-a2a9-a710607f9370", "content": "", "creation_timestamp": "2026-06-30T10:01:05.936457Z"}, {"uuid": "7bc55fe9-c468-41a0-adee-c220adcb9b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_web_gateway_lfi.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Unknown\", \"muts\", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Symantec Web Gateway's HTTP\\n          service.  By injecting PHP code in the access log, it is possible to load it\\n          with a directory traversal flaw, which allows remote code execution under the\\n          context of 'apache'. Please note that it may take up to several minutes to\\n          retrieve access_log, which is about the amount of time required to see a shell\\n          back.\", \"disclosure_date\": \"2012-05-17\", \"fullname\": \"exploit/linux/http/symantec_web_gateway_lfi\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Symantec Web Gateway 5.0.2.8 relfile File Inclusion Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/symantec_web_gateway_lfi.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/symantec_web_gateway_lfi\", \"references\": [\"CVE-2012-0297\", \"OSVDB-82023\", \"EDB-18932\", \"URL-http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Symantec Web Gateway 5.0.2.8\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:57.248893Z"}, {"uuid": "325072a7-f5eb-44b9-8a36-9ab11c952d49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0297", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_web_gateway_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Unknown\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability found in Symantec Web\\n          Gateway's HTTP service due to the insecure usage of the exec() function. This module\\n          abuses the spywall/ipchange.php file to execute arbitrary OS commands without\\n          authentication.\", \"disclosure_date\": \"2012-05-17\", \"fullname\": \"exploit/linux/http/symantec_web_gateway_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Symantec Web Gateway 5.0.2.8 ipchange.php Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/symantec_web_gateway_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/symantec_web_gateway_exec\", \"references\": [\"CVE-2012-0297\", \"OSVDB-82925\", \"BID-53444\", \"ZDI-12-090\", \"URL-http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Symantec Web Gateway 5.0.2.8\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:57.082945Z"}]}