CVE-2018-5778: SQL Injection
An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Multiple SQL injection vulnerabilities are present in the legacy .ASP pages, which could allow attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-5778?
CVE-2018-5778 is a vulnerability in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1) that allows attackers to execute arbitrary SQL commands.
How severe is CVE-2018-5778?
CVE-2018-5778 has a severity rating of 9.8 (critical).
What software is affected by CVE-2018-5778?
Ipswitch WhatsUp Gold versions up to and excluding 17.1.1 are affected by CVE-2018-5778.
How can the SQL injection vulnerabilities be exploited?
The SQL injection vulnerabilities in Ipswitch WhatsUp Gold can be exploited by attackers using unspecified vectors to execute arbitrary SQL commands.
Is there a fix available for CVE-2018-5778?
To fix CVE-2018-5778, upgrade to Ipswitch WhatsUp Gold 2017 Plus SP1 (17.1.1) or a later version.