jetlib.sec » Bugtraq » DDIVRT-2011-39 SolarWinds Storage Manager Server SQL Injection Authentication Bypass

Feeds

132963 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Bugtraq

• January 23, 2012
• 

  DDIVRT-2011-39 SolarWinds Storage Manager Server SQL Injection Authentication Bypass

  Posted: January 23rd, 2012, 8:46am PST

  Tags:   

  Posted by ddivulnalert on Jan 23

  Title
  -----
  DDIVRT-2011-39 SolarWinds Storage Manager Server SQL Injection
  Authentication Bypass
  
  Severity
  --------
  High
  
  Discovered By
  -------------
  Digital Defense, Inc. Vulnerability Research Team
  Credit: r () b13$
  
  Date Discovered
  ---------------
  December 7, 2011
  
  Vulnerability Description
  -------------------------
  The 'LoginServlet' page on port 9000 of the SolarWinds Storage Manager
  Server is vulnerable to a SQL injection within...