Approved changes feed: RSS · Atom

cpe:2.3:a:plixer:scrutinizer_netflow_\&_sflow_analyzer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPlixer (930bb988-d88b-5234-aaa1-a79c613b438e)
ProductScrutinizer Netflow & Sflow Analyzer (854a3180-a7b8-54cb-a0ee-7127e68c98be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1261 vulnerable 2026-06-08 05:00:48.478086 Details available
Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow and sFlow Analyzer 8.6.2.16204 and other versions before 9.0.1.19899 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter.
Published: 2020-01-09T19:47:53.000Z
Updated: 2024-08-06T18:53:36.965Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1260 vulnerable 2026-06-08 05:00:48.477739 Details available
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allows remote attackers to inject arbitrary web script or HTML via the newUser parameter. NOTE: this might not be a vulnerability, since an administrator might already have the privileges to create arbitrary script.
Published: 2020-01-09T19:47:50.000Z
Updated: 2024-08-06T18:53:36.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1259 vulnerable 2026-06-08 05:00:48.477374 Details available
Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the (1) addip parameter to cgi-bin/scrut_fa_exclusions.cgi, (2) getPermissionsAndPreferences parameter to cgi-bin/login.cgi, or (3) possibly certain parameters to d4d/alarms.php as demonstrated by the search_str parameter.
Published: 2020-01-09T19:47:46.000Z
Updated: 2024-08-06T18:53:36.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1258 vulnerable 2026-06-08 05:00:48.476907 Details available
cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters.
Published: 2020-01-09T19:47:43.000Z
Updated: 2024-08-06T18:53:36.409Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.