Scrutinizer is prone to multiple vulnerabillities. 1. A vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files to the affected computer this can result in arbitrary code execution within the context of the vulnerable application. 2. A security-bypass vulnerability. Successful attacks can allow an attacker to gain access to the affected application using the default authentication credentials. Scrutinizer 9.5.0 is vulnerable other versions may also be affected.

Updates are available. Please see the references for more information.

• http://www.plixer.com
• http://www.securityfocus.com/bid/54726

---

Updated on 2015-03-25