CVE-2009-3532

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-10-02 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2.3.3 on Windows allow remote attackers to execute arbitrary SQL commands via the (1) uname and (2) pword parameters. NOTE: some of these details are obtained from third party information.

Affected products

Logrover: 2.3, 2.3.3

References

http://secunia.com/advisories/35821
http://www.osvdb.org/55825
http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt
http://www.securityfocus.com/archive/1/504869/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/51686
http://secunia.com/advisories/35821
http://www.osvdb.org/55825
http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt
http://www.securityfocus.com/archive/1/504869/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/51686

Get alerted when CVE-2009-3532 or the next vulnerability affects your stack