CVE-2014-4976

Mô tả

Tham khảo

• packetstormsecurity.com/files/127429/Dell-Sonicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html · Third Party Advisory
• seclists.org/fulldisclosure/2014/Jul/44 · Mailing List
• securityfocus.com/bid/68495 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/94438 · Third Party Advisory
• gist.github.com/brandonprry/36b4b8df1cde279a9305 · Third Party Advisory
• gist.github.com/brandonprry/76741d9a0d4f518fe297 · Exploit

Lỗ hổng khác của scrutinizer

• CVE-2014-4977TRUNG BÌNH 6.5Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL comman…
• CVE-2012-3951CAO 7.5The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (…
• CVE-2012-3848TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 a…
• CVE-2012-2627NGHIÊM TRỌNG 9.4d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or…
• CVE-2012-2626TRUNG BÌNH 5.0cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authenticati…