CVE-2012-2627

d4d/uploader.php in the web console in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request...

Cross site request forgery (csrf)

d4d/uploader.php in the web console in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web console in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to d4d/exporters.php, 2 the HTTP Referer header to d4d/exporters.php, or 3...

CVE-2012-3848

CVE-2012-3848 affects Plixer Scrutinizer (Dell SonicWALL Scrutinizer) prior to 9.5.0. The vulnerability class is Cross-Site Scripting (XSS) in the web console, exploitable via the d4d/exporters.php (query string and Referer header) and d4d/contextMenu.php inputs, allowing remote attackers to inje...

CVE-2012-2627

Plixer Scrutinizer NetFlow & sFlow Analyzer (Dell SonicWALL Scrutinizer)

CVE-2012-3951

CVE-2012-3951 concerns the MySQL component in Plixer Scrutinizer (also Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier, which ships with a default password for two accounts ( Scrutinizer and ScrutRemote). This default credentialing flaw enables remote attackers to log into MySQL over a TCP se...

CVE-2012-3848

Multiple cross-site scripting XSS vulnerabilities in the web console in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to d4d/exporters.php, 2 the HTTP Referer header to d4d/exporters.php, or 3...

CVE-2012-2626

The Plixer Scrutinizer (also known as Dell SonicWALL Scrutinizer ) web console is vulnerable to an authentication bypass in the cgi-bin/admin.cgi script. This flaw occurs because the script does not require token authentication , allowing remote attackers to perform a userprefs action to add new ...

CVE-2012-2626: Improper Authentication

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action...

CVE-2012-2962

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter...

Sql injection

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter...

Dell SonicWALL Scrutinizer 'q' Parameter SQL Injection Vulnerability

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter. CVE: CVE-2012-2962 Last updated: March 12, 2018, 5:21 p.m...

CVE-2012-2962

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter...

CVE-2012-2962

CVE-2012-2962 affects Plixer Scrutinizer (Dell SonicWALL Scrutinizer)

Dell SonicWALL Scrutinizer SQL injection vulnerability

Overview Dell SonicWALL Scrutinizer 9.5.0 and older versions contain a SQL injection vulnerability. Description The Dell SonicWALL service bulletin states:"After the release of Dell SonicWALL Scrutinizer 9.5.0, we received a report of an issue whereby a Scrutinizer user who had already...

Dell SonicWALL Scrutinizer 9.0.1 (statusFilter.php q parameter) SQL Injection

Exploit for php platform in category web applications !/usr/bin/python Exploit Title: Dell SonicWALL Scrutinizer 9.0.1 statusFilter.php q parameter SQL Injection Date: Jul 22 2012 Author: muts Version: SonicWALL Scrutinizer 9.0.1 Vendor URL: http://www.sonicwall.com Special thanks to: Tal Zeltzer...

Dell SonicWALL Scrutinizer 9.0.1 SQL Injection

!/usr/bin/python Exploit Title: Dell SonicWALL Scrutinizer 9.0.1 statusFilter.php q parameter SQL Injection Date: Jul 22 2012 Author: muts Version: SonicWALL Scrutinizer 9.0.1 Vendor URL: http://www.sonicwall.com Special thanks to: Tal Zeltzer Timeline: 12 Jun 2012: Vulnerability reported to CERT...

Dell SonicWALL (Plixer) Scrutinizer 9 SQL Injection

This module exploits a vulnerability found in Dell SonicWall Scrutinizer. While handling the 'q' parameter, the PHP application does not properly filter the user-supplied data, which can be manipulated to inject SQL commands, and then gain remote code execution. Please note that authentication is...

Dell SonicWALL Scrutinizer 9.0.1 - statusFilter.php?q SQL Injection

Dell SonicWALL Scrutinizer 9.0.1 - statusFilter.php?q SQL Injection !/usr/bin/python Exploit Title: Dell SonicWALL Scrutinizer 9.0.1 statusFilter.php q parameter SQL Injection Date: Jul 22 2012 Author: muts Version: SonicWALL Scrutinizer 9.0.1 Vendor URL: http://www.sonicwall.com Special thanks t...

Dell SonicWALL Scrutinizer 9.0.1 - 'statusFilter.php?q' SQL Injection

!/usr/bin/python Exploit Title: Dell SonicWALL Scrutinizer 9.0.1 statusFilter.php q parameter SQL Injection Date: Jul 22 2012 Author: muts Version: SonicWALL Scrutinizer 9.0.1 Vendor URL: http://www.sonicwall.com Special thanks to: Tal Zeltzer Timeline: 12 Jun 2012: Vulnerability reported to CERT...