CVE-2005-1250

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-06-22 · updated 2026-06-16

Description

SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the (1) User Name field (sUserName parameter) or (2) Password (sPassword parameter).

Affected products

Ipswitch Whatsup: professional_2005_sp1

References

http://secunia.com/secunia_research/2005-13/advisory/
http://www.corsaire.com/advisories/c050323-001.txt
http://www.idefense.com/application/poi/display?id=268&type=vulnerabilities
http://www.ipswitch.com/forums/shwmessage.aspx?ForumID=20&MessageID=7699
http://secunia.com/secunia_research/2005-13/advisory/
http://www.corsaire.com/advisories/c050323-001.txt
http://www.idefense.com/application/poi/display?id=268&type=vulnerabilities
http://www.ipswitch.com/forums/shwmessage.aspx?ForumID=20&MessageID=7699

Get alerted when CVE-2005-1250 or the next vulnerability affects your stack