Security Advisory

CVE-2015-6004

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-12-27 02:00:00

Last updated 2024-08-06 07:06:35

Assigner certcc

CVSS score not scored

State PUBLISHED

Description

Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter to WrFreeFormText.asp in the Reports component or (2) the Find Device parameter.

← Browse all CVEs View on cve.org ↗