CVE-2012-2601

Ipswitch WhatsUp Gold 15.02 is affected by CVE-2012-2601 due to a blind SQL injection in WrVMwareHostList.asp via the sGroupList parameter, allowing remote SQL command execution. The issue is documented in multiple sources (NVD, CERT, Nessus) with PoC-like references and a CVSS base score of 7.5....

CVE-2012-2601: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter...