SQL injection problem!

We have an application VIP with an ASM profile. The application runs on Windows, IIS, ASP.net and SQL server.   Our BIGIP runs TMOS11.5.4HF4.   The application requires a login. When we fill in...