Sql injection

2015-12-2703:59:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.0%

JSON

Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter to WrFreeFormText.asp in the Reports component or (2) the Find Device parameter.

CPENameOperatorVersion
whatsup_goldle16.3

CPE	Name	Operator	Version
	whatsup_gold	le	16.3

References

www.securityfocus.com/bid/79506

www.securitytracker.com/id/1034833

community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems

twitter.com/ipswitch/statuses/677558623229317121

www.kb.cert.org/vuls/id/176160