SQL Injection Vulnerabilities in Dell SonicWall Scrutinizer
CVE-2014-4977

Currently unrated

Key Information:

Vendor

Sonicwall
Status
Scrutinizer
Vendor
CVE Published:
16 July 2014

What is CVE-2014-4977?

Dell SonicWall Scrutinizer version 11.0.1 is susceptible to multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands. Attackers can exploit the flaws by manipulating parameters such as selectedUserGroup in create new user requests or user_id and methodDetail in specific functions. This could enable unauthorized access to sensitive data and system functions, posing significant risks to data integrity and confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.exploit-db.com/exploits/39836/
exploitx_refsource_EXPLOIT-DB
http://seclists.org/fulldisclosure/2014/Jul/44
mailing-listx_refsource_FULLDISC
http://packetstormsecurity.com/files/137098/Dell-SonicWAL...
x_refsource_MISC

EPSS Score

84% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.