Progress

Whatsup Gold

56 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2015-6004

Exploit
  • EPSS 16.9%
  • Published 27.12.2015 03:59:00
  • Last modified 12.04.2025 10:46:40

Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter to WrFreeFormText.asp in the Reports component or (2) the Find Device ...

4.3

CVE-2012-4344

Exploit
  • EPSS 9.16%
  • Published 15.08.2012 22:55:02
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP system name of the attacking host.

7.5

CVE-2012-2601

Exploit
  • EPSS 16.69%
  • Published 15.08.2012 22:55:02
  • Last modified 11.04.2025 00:51:21

SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter.

7.8

CVE-2007-2602

  • EPSS 3.36%
  • Published 11.05.2007 10:19:00
  • Last modified 09.04.2025 00:30:58

Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application crash) or execute arbitrary code via a long MIB filename argument. NOTE: If there is not a common scenario under which MIBEXTRA.EX...

7.5

CVE-2004-0798

  • EPSS 72.64%
  • Published 20.10.2004 04:00:00
  • Last modified 03.04.2025 01:03:51

Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter.

5

CVE-2004-0799

  • EPSS 11.43%
  • Published 20.10.2004 04:00:00
  • Last modified 03.04.2025 01:03:51

The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device name, as demonstrated using "prn.htm".