SolarWinds Storage Resource Monitor Profiler addNewRule SQL Injection RCE

The SolarWinds Storage Resource Monitor SRM Profiler formerly SolarWinds Storage Manager running on the remote host is affected by a remote code execution vulnerability in ScriptServlet due to a failure to sanitize user-supplied input to the addNewRule method of the RulesMetaData class. An...

PT-2016-5897

Name of the Vulnerable Software and Affected Versions SolarWinds Storage Resource Monitor SRM Profiler versions prior to 6.2.3 Description The issue concerns multiple SQL injection vulnerabilities in the Web Services web server. These vulnerabilities allow remote attackers to execute arbitrary SQ...