CVE-2012-3951
Plixer Scrutinizer <= 9.0.1.19899 - Unauthenticated SQL Injection via Default MySQL Credentials
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-3951.
PoCs published by Metasploit, MC, Jonathan Claudius, Tanya Secker, sinn3r, including Metasploit module exploits/windows/mysql/scrutinizer_upload_exec.
AI-analyzed exploit summary This Metasploit module exploits default MySQL credentials in Plixer Scrutinizer NetFlow and sFlow Analyzer 9 to achieve remote code execution by uploading and executing a malicious PHP file via MySQL's DUMPFILE functionality.
Description
The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session.
Exploits (2)
This Metasploit module exploits default MySQL credentials in Plixer Scrutinizer NetFlow and sFlow Analyzer 9 to achieve remote code execution by uploading and executing a malicious PHP file via MySQL's DUMPFILE functionality.
This Metasploit module exploits a default MySQL credential vulnerability in Plixer Scrutinizer NetFlow and sFlow Analyzer 9. It leverages the default credentials to upload and execute arbitrary code via MySQL's DUMPFILE functionality, achieving remote code execution as SYSTEM.