CVE-2005-1250: SQL Injection
SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the (1) User Name field (sUserName parameter) or (2) Password (sPassword parameter).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1250?
CVE-2005-1250 is classified as a high severity SQL injection vulnerability.
How do I fix CVE-2005-1250?
To fix CVE-2005-1250, you should upgrade to a newer version of IpSwitch WhatsUp that has addressed this vulnerability.
What are the potential impacts of CVE-2005-1250?
The potential impacts of CVE-2005-1250 include unauthorized access and manipulation of the database, leading to data exposure or corruption.
Which software is affected by CVE-2005-1250?
CVE-2005-1250 affects IpSwitch WhatsUp Professional 2005 SP1.
How can attackers exploit CVE-2005-1250?
Attackers can exploit CVE-2005-1250 by injecting malicious SQL commands through the User Name or Password fields in the logon screen.