GCVE - cpe:2.3:a:sonicwall:scrutinizer:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:scrutinizer:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sonicwall (`28e2a9d1-aad2-54b9-a84d-b04e317de676`)
Product	Scrutinizer (`13881eda-8292-55ea-bb4c-6ac14d6a4420`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-3951`	vulnerable	2026-06-08 05:02:14.528720	Details available The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session. Published: 2012-07-31T10:00:00.000Z Updated: 2024-09-17T03:07:09.522Z Open on db.gcve.eu Reference links https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3848`	vulnerable	2026-06-08 05:02:14.029904	Details available Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to d4d/exporters.php, (2) the HTTP Referer header to d4d/exporters.php, or (3) unspecified input to d4d/contextMenu.php. Published: 2012-07-31T10:00:00.000Z Updated: 2024-09-16T22:03:29.811Z Open on db.gcve.eu Reference links https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2962`	vulnerable	2026-06-08 05:02:07.410493	Details available SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter. Published: 2012-07-30T22:00:00.000Z Updated: 2024-08-06T19:50:05.342Z Open on db.gcve.eu Reference links http://www.osvdb.org/84232 http://secunia.com/advisories/50052 http://www.sonicwall.com/shared/download/Dell_SonicWALL_Scrutinizer_Service_Bulletin_for_SQL_injection_vulnerability_CVE.pdf http://www.securityfocus.com/bid/54625 http://www.exploit-db.com/exploits/20033	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2627`	vulnerable	2026-06-08 05:02:04.976464	Details available d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request. Published: 2012-07-31T10:00:00.000Z Updated: 2024-09-16T17:29:08.391Z Open on db.gcve.eu Reference links https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2626`	vulnerable	2026-06-08 05:02:04.976088	Details available cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action. Published: 2012-07-31T10:00:00.000Z Updated: 2024-09-16T16:28:35.817Z Open on db.gcve.eu Reference links https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.