{"id":"CVE-2012-1258","aliases":["EUVD-2012-1284","GHSA-mpqx-63fh-p5mj"],"status":"published","title":"cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow \u0026 sFlow Analyzer before 9.0.1...","description":"cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow \u0026 sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03327,"percentile":0.88681,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-287"],"published":"2020-01-09T19:47:43Z","modified":"2026-06-16T23:39:20Z","exploits":[{"source":"exploitdb","id":"EDB-18750","title":"Scrutinizer NetFlow \u0026 sFlow Analyzer - Multiple Vulnerabilities","type":"webapps","platform":"multiple","date":"2012-04-19","verified":true,"url":"https://www.exploit-db.com/exploits/18750"}],"products":[{"vendor":"plixer","product":"scrutinizer_netflow_\\\u0026_sflow_analyzer"}],"references":[{"url":"http://packetstormsecurity.org/files/111791/Scrutinizer-8.6.2-Bypass-Cross-Site-Scripting-SQL-Injection.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/18750","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/52989","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74824","tags":["x_refsource_MISC","x_transferred","VDB Entry"]},{"url":"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-008-multiple-vulnerabilities-in-scrutinizer-netflow-sflow-analyzer/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1258"},{"url":"https://github.com/advisories/GHSA-mpqx-63fh-p5mj"}],"sources":{"cve":[{"id":"CVE-2012-1258","description":"cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow \u0026 sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters.","status":"published","published":"2020-01-09T19:47:43Z","modified":"2024-08-06T18:53:36.409Z","updated_at":"2026-11-02T14:34:52.638543Z"}],"euvd":[{"id":"EUVD-2012-1284","description":"cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow \u0026 sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters.","status":"published","published":"2020-01-09T19:47:43Z","modified":"2024-08-06T18:53:36Z","updated_at":"2026-11-03T01:56:18.356301Z"}],"ghsa":[{"id":"GHSA-mpqx-63fh-p5mj","title":"cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow \u0026 sFlow Analyzer before 9.0.1...","description":"cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow \u0026 sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters.","status":"published","published":"2022-04-23T00:40:28Z","modified":"2023-01-27T05:01:55Z","updated_at":"2026-11-02T14:41:59.335185Z"}],"nvd":[{"id":"CVE-2012-1258","description":"cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow \u0026 sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters.","status":"published","published":"2020-01-09T20:15:09.85Z","modified":"2026-06-16T23:39:20.113Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:02:18.043773Z"}]}}