CVE-2014-4977

Mô tả

Tham khảo

• packetstormsecurity.com/files/127429/Dell-Sonicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html · Third Party Advisory
• packetstormsecurity.com/files/137098/Dell-SonicWALL-Scrutinizer-11.01-methodDetail-SQL-Injection.html · Third Party Advisory
• seclists.org/fulldisclosure/2014/Jul/44 · Mailing List
• securityfocus.com/bid/68495 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/94439 · Third Party Advisory
• gist.github.com/brandonprry/36b4b8df1cde279a9305 · Third Party Advisory
• gist.github.com/brandonprry/76741d9a0d4f518fe297 · Exploit
• exploit-db.com/exploits/39836 · Third Party Advisory

Lỗ hổng khác của scrutinizer

• CVE-2014-4976TRUNG BÌNH 5.5Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in a…
• CVE-2012-3951CAO 7.5The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (…
• CVE-2012-3848TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 a…
• CVE-2012-2627NGHIÊM TRỌNG 9.4d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or…
• CVE-2012-2626TRUNG BÌNH 5.0cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authenticati…