SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/77148
http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html