CVE-2005-1250

None

CVSS

—

EPSS

20.9%

Published

Jun 22, 2005

CISA due date

—

The record

SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the (1) User Name field (sUserName parameter) or (2) Password (sPassword parameter).

Affected packages

Ecosystem	Package	Introduced	Fixed