CVE-2009-3532

Multiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2.3.3 on Windows allow remote attackers to execute arbitrary SQL commands via the (1) uname and (2) pword parameters.  NOTE: some of these details are obtained from third party information.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
logroverlogrover
2.3
logroverlogrover
2.3.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/35821
http://www.osvdb.org/55825
http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt
http://www.securityfocus.com/archive/1/504869/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/51686
http://secunia.com/advisories/35821
http://www.osvdb.org/55825
http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt
http://www.securityfocus.com/archive/1/504869/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/51686