SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.
| Software | From | Fixed in |
|---|---|---|
| surfcontrol / web_filter | 4.1 | 4.1.x |
| surfcontrol / superscout_web_filter | 3.0 | 3.0.x |
| surfcontrol / web_filter | 4.0 | 4.0.x |
| surfcontrol / superscout_web_filter | 3.0.3 | 3.0.3.x |