CVE-2012-2576

CRITICAL 9.8CVE-2012-2576 · Published 20/12/2017 · updated 16/06/2026

Package	Affected versions	Patched versions
backup profiler solarwinds	`< 5.1.2`	`5.1.2`
storage manager solarwinds	`< 5.1.2`	`5.1.2`
storage profiler solarwinds	`< 5.1.2`	`5.1.2`

Description

SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.

References

exploit-db.com/exploits/18818 · Exploit
exploit-db.com/exploits/18833 · Exploit
securityfocus.com/bid/51639 · Third Party Advisory
solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/vulnerability.htm · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/72680 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free