CVE-2012-3848

Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to d4d/exporters.php, (2) the HTTP Referer header to d4d/exporters.php, or (3) unspecified input to d4d/contextMenu.php.

• CWE-79

• http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.htmlBroken Link, Third Party Advisory
• https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txtExploit, Third Party Advisory
• http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.htmlBroken Link, Third Party Advisory
• https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txtExploit, Third Party Advisory

Published

Jul 31, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3842Multiple cross-site scripting (XSS) vulnerabilities in CMD_D…
• CVE-2012-3843Cross-site scripting (XSS) vulnerability in the registration…
• CVE-2012-3844Cross-site scripting (XSS) vulnerability in vBulletin 4.1.12…
• CVE-2012-3845Buffer overflow in LAN Messenger 1.2.28 and earlier allows r…
• CVE-2012-3846Cross-site scripting (XSS) vulnerability in index.php in PHP…
• CVE-2012-3847slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTo…
• CVE-2012-3859Unspecified vulnerability in the WebAdmin Portal in Netsweep…
• CVE-2012-3863channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8…
• CVE-2012-3864Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Ent…
• CVE-2012-3865Directory traversal vulnerability in lib/puppet/reports/stor…
• CVE-2012-3866lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Pu…
• CVE-2012-3867lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6…