6.5
CVSSv2

CVE-2012-2962

Published: 30/07/2012 Updated: 12/03/2018
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 660
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) prior to 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

sonicwall scrutinizer

Exploits

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking ...
#!/usr/bin/python ###################################################################################### # Exploit Title: Dell SonicWALL Scrutinizer 901 (statusFilterphp q parameter) SQL Injection # Date: Jul 22 2012 # Author: muts # Version: SonicWALL Scrutinizer 901 # Vendor URL: wwwsonicwallcom # # Special thanks to: Tal Zeltzer # ...