CVE-2012-2601: SQL Injection
Published Aug 15, 2012
·Updated
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter.
Affected Software
2 affected components
Progress WhatsUp Gold=15.02
Ipswitch WhatsUp Gold=15.02
Event History
Aug 15, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2601?
CVE-2012-2601 is considered a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2012-2601?
To mitigate CVE-2012-2601, upgrade to a patched version of Ipswitch WhatsUp Gold that addresses this SQL injection vulnerability.
3
What systems are affected by CVE-2012-2601?
CVE-2012-2601 affects Ipswitch WhatsUp Gold version 15.02.
4
What type of vulnerability is CVE-2012-2601?
CVE-2012-2601 is classified as an SQL injection vulnerability.
5
Can CVE-2012-2601 be exploited remotely?
Yes, CVE-2012-2601 can be exploited remotely by attackers targeting the sGroupList parameter.