SolarWinds Network Configuration Manager (NCM) Detection (HTTP)

HTTP based detection of SolarWinds Network Configuration Manager NCM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SolarWinds VoIP and Network Quality Manager (VNQM) Detection (HTTP)

HTTP based detection of SolarWinds VoIP and Network Quality Manager VNQM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SolarWinds User Device Tracker (UDT) Detection (HTTP)

HTTP based detection of SolarWinds User Device Tracker UDT. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SolarWinds Web Performance Monitor (WPM) Detection (HTTP)

HTTP based detection of SolarWinds Web Performance Monitor WPM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SolarWinds Server & Application Monitor (SAM) Detection (HTTP)

HTTP based detection of SolarWinds Server & Application Monitor SAM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SolarWinds IP Address Manager (IPAM) Detection (HTTP)

HTTP based detection of SolarWinds IP Address Manager IPAM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SolarWinds Network Performance Monitor Multiple SQLi Vulnerabilities

SolarWinds Network Performance Monitor is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SolarWinds Netflow Traffic Analyzer (NTA) < 4.1 Multiple SQLi Vulnerabilities

SolarWinds Netflow Traffic Analyzer NTA is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

SolarWinds Server & Application Monitor < 6.2 Multiple SQLi Vulnerabilities

SolarWinds Server & Application Monitor SAM is prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SolarWinds Web Performance Monitor (WPM) < 2.2 Multiple SQLi Vulnerabilities

SolarWinds Web Performance Monitor WPM is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SolarWinds Netflow Traffic Analyzer (NTA) Detection (HTTP)

HTTP based detection of SolarWinds Netflow Traffic Analyzer NTA. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Multiple SQL Injection Vulnerabilities in Multiple Solarwinds Products core Orion

SolarWinds Orion is a comprehensive network fault and network performance management platform that adapts to the rapid growth of networks and expanding network requirements. Auxiliary/gather/solarwindsorionsqli included in multiple Solarwinds products fails to properly filter user-submitted input...

Solarwinds Orion Service SQL Injection Vulnerability

Various remote SQL injection vulnerabilities exist in the core Orion service used in most of the Solarwinds products. Affected products include Network Performance Monitor below version 11.5, NetFlow Traffic Analyzer below version 4.1, Network Configuration Manager below version 7.3.2, IP Address...

SolarWinds Orion Service - SQL Injection

I found a couple SQL injection vulnerabilities in the core Orion service used in most of the Solarwinds products SAM, IPAM, NPM, NCM, etc…. This service provides a consistent configuration and authentication layer across the products. To be exact, the vulnerable applications and versions are:...

SolarWinds Orion Service - SQL Injection

SolarWinds Orion Service - SQL Injection I found a couple SQL injection vulnerabilities in the core Orion service used in most of the Solarwinds products SAM, IPAM, NPM, NCM, etc…. This service provides a consistent configuration and authentication layer across the products. To be exact, the...

Solarwinds Orion AccountManagement.asmx GetAccounts Admin Creation Exploit

This module exploits a stacked SQL injection in order to add an administrator user to the SolarWinds Orion database. Usage Info msf use auxiliary/gather/solarwindsorionsqli msf auxiliarysolarwindsorionsqli show actions ...actions... msf auxiliarysolarwindsorionsqli set ACTION msf...

Solarwinds Orion Service SQL Injection

I found a couple SQL injection vulnerabilities in the core Orion service used in most of the Solarwinds products SAM, IPAM, NPM, NCM, etc…. This service provides a consistent configuration and authentication layer across the products. To be exact, the vulnerable applications and versions are:...

Solarwinds Orion AccountManagement.asmx GetAccounts Admin Creation

This module exploits a stacked SQL injection in order to add an administrator user to the SolarWinds Orion database. Module Options msf use auxiliary/gather/solarwinds/orionsqli msf undefinedorionsqli show actions ...actions... msf undefinedorionsqli set ACTION msf undefinedorionsqli show options...

SolarWinds Server and Application Monitor Buffer Overflow Vulnerability (CNVD-2015-01241)

SolarWinds Server and Application Monitor is a server and application monitor from SolarWinds USA. The monitor provides monitoring, alerts, reports and more for server hardware and applications. A security vulnerability in the SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl...

SolarWinds Server and Application Monitor Buffer Overflow Vulnerability (CNVD-2015-01240)

SolarWinds Server and Application Monitor is a server and application monitor from SolarWinds USA. The monitor provides monitoring, alerts, reports and more for server hardware and applications. SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl has multiple stack buffer...