CVE-2014-4976

概要

参考情報

• packetstormsecurity.com/files/127429/Dell-Sonicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html · Third Party Advisory
• seclists.org/fulldisclosure/2014/Jul/44 · Mailing List
• securityfocus.com/bid/68495 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/94438 · Third Party Advisory
• gist.github.com/brandonprry/36b4b8df1cde279a9305 · Third Party Advisory
• gist.github.com/brandonprry/76741d9a0d4f518fe297 · Exploit

scrutinizer のその他の脆弱性

• CVE-2014-4977中 6.5Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL comman…
• CVE-2012-3951高 7.5The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (…
• CVE-2012-3848中 4.3Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 a…
• CVE-2012-2627緊急 9.4d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or…
• CVE-2012-2626中 5.0cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authenticati…