EDB-19321

PoC

IBM System Storage DS Storage Manager Profiler - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor LiquidWormpublished 2012-06-21catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-2172US	medium4.3	1.78% (78th)	Exploit	2012-06-22
Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices…
CVE-2012-2171US	medium6.5	5.08% (92nd)	Exploit	2012-06-22
SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote authe…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.