CVE-2012-2962

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Dell SonicWALL Scrutinizer 9 - SQL Injection (Metasploit)2012-08-03 · remote · windows · Verified
• Dell SonicWALL Scrutinizer 9.0.1 - 'statusFilter.php?q' SQL Injection2012-07-22 · webapps · php · Verified

Impact

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/50052
• http://www.exploit-db.com/exploits/20033
• http://www.kb.cert.org/vuls/id/404051
• http://www.osvdb.org/84232
• http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
• http://www.securityfocus.com/bid/54625
• http://www.sonicwall.com/shared/download/Dell_SonicWALL_Scrutinizer_Service_Bulletin_for_SQL_injection_vulnerability_CVE.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77148
• http://secunia.com/advisories/50052
• http://www.exploit-db.com/exploits/20033
• http://www.kb.cert.org/vuls/id/404051
• http://www.osvdb.org/84232
• http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
• http://www.securityfocus.com/bid/54625
• http://www.sonicwall.com/shared/download/Dell_SonicWALL_Scrutinizer_Service_Bulletin_for_SQL_injection_vulnerability_CVE.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77148