CVE-2005-1250
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/06/2005
Last modified:
05/09/2008
Description
SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the (1) User Name field (sUserName parameter) or (2) Password (sPassword parameter).
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:ipswitch:whatsup:professional_2005_sp1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page