CVE-2012-2576 SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote att...
CriticalCVSS 9.8
EPSS 60.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| solarwinds backup profiler | < 5.1.2 | 5.1.2 |
| solarwinds storage manager | < 5.1.2 | 5.1.2 |
| solarwinds storage profiler | < 5.1.2 | 5.1.2 |
References
- 18818 exploit third-party-advisory vdb-entry
- 18833 exploit third-party-advisory vdb-entry
- 51639 third-party-advisory vdb-entry
- www.solarwinds.com vendor-advisory
- solarwnds-loginservlet-sql-injection(72680) third-party-advisory vdb-entry