Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-2627. PoCs published by Mario Ceballos.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file upload vulnerability in Scrutinizer 9.5.0 due to insufficient input sanitization. The PoC shows a successful upload of a file named 'trustwave.txt' via a POST request to '/d4d/uploader.php'.
Description
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.
Exploits (1)
This exploit demonstrates an arbitrary file upload vulnerability in Scrutinizer 9.5.0 due to insufficient input sanitization. The PoC shows a successful upload of a file named 'trustwave.txt' via a POST request to '/d4d/uploader.php'.