critical9.4Public exploit code
CVE-2012-2627
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Scrutinizer 9.0.1.19899 - Arbitrary File Upload2012-07-30 · webapps · php · Verified
Impact
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Scrutinizer | before 9.5.0 |