CVE-2018-5778
Summary
| CVE | CVE-2018-5778 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-01-24 15:29:00 UTC |
| Updated | 2018-02-09 18:08:00 UTC |
| Description | An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Multiple SQL injection vulnerabilities are present in the legacy .ASP pages, which could allow attackers to execute arbitrary SQL commands via unspecified vectors. |
Risk And Classification
Problem Types: CWE-89
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ipswitch | Whatsup Gold | All | All | All | All |
| Application | Ipswitch | Whatsup Gold | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Release Notes for Ipswitch WhatsUp Gold 2017 Plus Service Pack 1 | CONFIRM | docs.ipswitch.com | Release Notes, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.