CVE-2012-1259

CRITICAL

Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204-9.0.1.19899 - SQL Injection via Multiple CGI Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-1259. PoCs published by Trustwave's SpiderLabs.

AI-analyzed exploit summary This is a detailed security advisory from Trustwave SpiderLabs describing multiple vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer, including authentication bypass, SQL injection, and XSS. It provides proof-of-concept examples for each vulnerability but does not include executable exploit code.

Description

Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the (1) addip parameter to cgi-bin/scrut_fa_exclusions.cgi, (2) getPermissionsAndPreferences parameter to cgi-bin/login.cgi, or (3) possibly certain parameters to d4d/alarms.php as demonstrated by the search_str parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Trustwave's SpiderLabs · textwebappsmultiple
https://www.exploit-db.com/exploits/18750

This is a detailed security advisory from Trustwave SpiderLabs describing multiple vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer, including authentication bypass, SQL injection, and XSS. It provides proof-of-concept examples for each vulnerability but does not include executable exploit code.

Classification
Writeup 100%
Attack Type
Auth Bypass | Sqli | Xss
Complexity
Trivial
Reliability
Reliable
Target: Scrutinizer NetFlow and sFlow Analyzer 8.6.2 (8.6.2.16204)
No auth needed
Prerequisites: Network access to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://www.exploit-db.com/exploits/18750
Third Party Advisory, VDB Entry x_refsource_misc
http://www.securityfocus.com/bid/52989
Third Party Advisory, VDB Entry x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/74826

Scores

CVSS v3 9.8
EPSS 0.1432
EPSS Percentile 94.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
plixer/scrutinizer_netflow_\&_sflow_analyzer 8.6.2.16204 - 9.0.1.19899
Published Jan 09, 2020
Tracked Since Feb 18, 2026