Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-2601. PoCs published by muts.
AI-analyzed exploit summary This JavaScript exploit targets Ipswitch WhatsUp Gold 15.02 via a blind SQL injection vulnerability in WrVMwareHostList.asp. It enables xp_cmdshell, uploads a reverse shell, and executes it, leveraging stored XSS and SQLi for RCE.
Description
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter.
Exploits (1)
This JavaScript exploit targets Ipswitch WhatsUp Gold 15.02 via a blind SQL injection vulnerability in WrVMwareHostList.asp. It enables xp_cmdshell, uploads a reverse shell, and executes it, leveraging stored XSS and SQLi for RCE.