EDB-20035

functional

ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution

view exploit source exploit_dbverifiedtype webappsauthor mutspublished 2012-07-22catalog exploit_db

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-2589US	—	—	Exploit	2012-11-20
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4344. Reason: This candidate is a duplicate of CVE-2012-4344. Notes: All CVE users should reference CVE-2…
CVE-2012-4344US	medium4.3	3.81% (90th)	Exploit	2012-08-15
Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP sy…
CVE-2012-2601US	high7.5	2.91% (87th)	Exploit	2012-08-15
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.