Software Engineering Institute

Ipswitch WhatsUp Gold 15.02 has been reported to contain blind SQL injection and cross-site scripting vulnerabilities.

CWE-79 - CVE-2012-2601 - Blind SQL Injection
A blind SQL injection attack may be performed against the WrVMwareHostList.asp file.

Proof of Concept:
WrVMwareHostList.asp?sGroupList=1;WAITFOR DELAY '0:0:10'--&sDeviceList=3

CWE-89 - CVE-2012-2589 - Cross-site scripting
The snmpd.conf file may be maliciously modified to execute arbitrary Javascript.

Proof of Concept:
sysName <script>alert(124)</script>pt>>

The CVSS score below applies to CVE-2012-2601.

An attacker may be able to execute arbitrary SQL commands and script.

Apply an Update
WhatsUp Gold 15.03 has been released to address these vulnerabilities.