CVE-2012-2576 | BDVDB-2026-94231 Detail

Description#

SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/72680
http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/vulnerability.htm
http://www.exploit-db.com/exploits/18818
http://www.securityfocus.com/bid/51639
http://www.exploit-db.com/exploits/18833

Exploit#

http://www.exploit-db.com/exploits/18818
http://www.exploit-db.com/exploits/18833

History#

Version 12017-12-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.