SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
https://exchange.xforce.ibmcloud.com/vulnerabilities/24592
http://www.vupen.com/english/advisories/2006/0489
http://www.securityfocus.com/archive/1/424389/100/0/threaded