CVE-2012-2962

CVE-2012-2962 affects Plixer Scrutinizer (Dell SonicWALL Scrutinizer)

Dell SonicWALL Scrutinizer SQL injection vulnerability

Overview Dell SonicWALL Scrutinizer 9.5.0 and older versions contain a SQL injection vulnerability. Description The Dell SonicWALL service bulletin states:"After the release of Dell SonicWALL Scrutinizer 9.5.0, we received a report of an issue whereby a Scrutinizer user who had already...

Dell SonicWALL Scrutinizer 9.0.1 (statusFilter.php q parameter) SQL Injection

Exploit for php platform in category web applications !/usr/bin/python Exploit Title: Dell SonicWALL Scrutinizer 9.0.1 statusFilter.php q parameter SQL Injection Date: Jul 22 2012 Author: muts Version: SonicWALL Scrutinizer 9.0.1 Vendor URL: http://www.sonicwall.com Special thanks to: Tal Zeltzer...

Dell SonicWALL Scrutinizer 9.0.1 - statusFilter.php?q SQL Injection

Dell SonicWALL Scrutinizer 9.0.1 - statusFilter.php?q SQL Injection !/usr/bin/python Exploit Title: Dell SonicWALL Scrutinizer 9.0.1 statusFilter.php q parameter SQL Injection Date: Jul 22 2012 Author: muts Version: SonicWALL Scrutinizer 9.0.1 Vendor URL: http://www.sonicwall.com Special thanks t...

Dell SonicWALL (Plixer) Scrutinizer 9 SQL Injection

This module exploits a vulnerability found in Dell SonicWall Scrutinizer. While handling the 'q' parameter, the PHP application does not properly filter the user-supplied data, which can be manipulated to inject SQL commands, and then gain remote code execution. Please note that authentication is...

Dell SonicWALL Scrutinizer 9.0.1 - 'statusFilter.php?q' SQL Injection

!/usr/bin/python Exploit Title: Dell SonicWALL Scrutinizer 9.0.1 statusFilter.php q parameter SQL Injection Date: Jul 22 2012 Author: muts Version: SonicWALL Scrutinizer 9.0.1 Vendor URL: http://www.sonicwall.com Special thanks to: Tal Zeltzer Timeline: 12 Jun 2012: Vulnerability reported to CERT...

Dell SonicWALL Scrutinizer 9.0.1 SQL Injection

!/usr/bin/python Exploit Title: Dell SonicWALL Scrutinizer 9.0.1 statusFilter.php q parameter SQL Injection Date: Jul 22 2012 Author: muts Version: SonicWALL Scrutinizer 9.0.1 Vendor URL: http://www.sonicwall.com Special thanks to: Tal Zeltzer Timeline: 12 Jun 2012: Vulnerability reported to CERT...

Scrutinizer NetFlow & sFlow Analyzer Detection

Scrutinizer NetFlow & sFlow Analyzer, a network traffic analysis tool, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58992; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Scrutinizer NetFlow & sFlow...

New VPN Hunter Service Scans Domains For Remote-Access Systems

If there’s one thing attackers love, it’s readily accessible remote-connection services running on a target company’s network. Once an attacker knows that an organization is running a specific kind of VPN or has RDP enabled on a bunch of machines, he can then start looking for known vulnerabiliti...

SonicWALL GMS 6 Arbitrary File Upload

This module exploits a code execution flaw in SonicWALL GMS. It exploits two vulnerabilities in order to get its objective. An authentication bypass in the Web Administration interface allows to abuse the "appliance" application and upload an arbitrary payload embedded in a JSP. The module has be...

SonicWALL AntiSpam EMail 7.3.1 - Multiple Vulnerabilities

SonicWALL AntiSpam EMail 7.3.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/51337/info SonicWall AntiSpam & EMail is prone to a cross-site scripting vulnerability, a URI-redirection vulnerability, and an HTML-injection vulnerability because it fails to sufficiently sanitiz...

SonicWall AntiSpam And Email Security 7.x XSS / Redirection

Title: ====== SonicWall AntiSpam & EMail Security v7.x - Multiple Web Vulnerabilities Date: ===== 2012-01-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=58 VL-ID: ===== 58 Introduction: ============= Spam-, Phishing- und mit Viren infizierte Nachrichten verursachen ...

SonicWall AntiSpam & EMail v7.x - Multiple Vulnerabilities

Document Title: =============== SonicWall AntiSpam & EMail v7.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=58 Release Date: ============= 2012-01-07 Vulnerability Laboratory ID VL-ID: ==================================== 5...

SonicWALL Aventail SQLi Vulnerability - Active Check

SonicWALL Aventail is prone to an SQL injection SQLi vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

SonicWALL Aventail 'CategoryID' Parameter SQL Injection Vulnerability

SonicWALL Aventail is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the...

SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=286 CNNVD-201112-148 Release Date: ============= 2011-11-17 Vulnerability Laboratory ID VL-ID:...

SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=286 CNNVD-201112-148 Release Date: ============= 2011-11-17 Vulnerability Laboratory ID VL-ID:...

SonicWALL Aventail SSL-VPN SQL Injection

================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda...

SonicWALL Aventail SSL-VPN - SQL Injection

SonicWALL Aventail SSL-VPN - SQL Injection ================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar...

SonicWALL Aventail SSL-VPN - SQL Injection

================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda...