The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks via a crafted SOAP request.
CPE | Name | Operator | Version |
---|---|---|---|
whatsup_gold | eq | 16.3 |