Ipswitch WhatsUp Gold SQL Injection Vulnerability

WhatsUp Gold provides a complete and easy-to-use monitoring mechanism to monitor all aspects of application services and network devices, assisting IT managers to turn network management information into readable business information. In Ipswitch WhatsUp Gold versions prior to 16.4,...

CVE-2015-8261: Improper Neutralization of Special Elements used in an SQL Command

The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks via a crafted SOAP request...