KLA10228ACE vulnerability in WhatsUp Professional

2005-06-22T00:00:00
ID KLA10228
Type kaspersky
Reporter Kaspersky Lab
Modified 2019-03-07T00:00:00

Description

Detect date:

06/22/2005

Severity:

Critical

Description:

An SQL injection vulnerability was found in WhatsUp Professional. By exploiting this vulnerability malicious users can execute arbitrary SQL commands. This vulnerability can be exploited remotely at points related to the logon screen.

Affected products:

Ipswitch WhatsUp Professional version 2005 SP1

Solution:

Update to latest version

Impacts:

ACE

Related products:

Ipswitch WhatsUp Professional

CVE-IDS:

CVE-2005-12507.5Critical