CVE-2016-4350

Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor SRM Profiler formerly Storage Manager STM before 6.2.3 allow remote attackers to execute arbitrary SQL commands via the 1 ScriptSchedule parameter in the ScriptServlet servlet; the 2...

CVE-2016-4350

CVE-2016-4350 affects SolarWinds SRM Profiler (formerly STM) Web Services before 6.2.3. Multiple SQL injection vulnerabilities exist across numerous servlets (e.g., ScriptServlet, WindowsEventLogsServlet, ProcessesServlet, BackupExceptionsServlet, BackupAssociationServlet, HostStorageServlet, Dup...