CVE-2009-3532

EUVD-2009-3514
Multiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2.3.3 on Windows allow remote attackers to execute arbitrary SQL commands via the (1) uname and (2) pword parameters.  NOTE: some of these details are obtained from third party information.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
Affected Products (NVD)
VendorProductVersion
logroverlogrover
2.3
logroverlogrover
2.3.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/35821
http://www.osvdb.org/55825
http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt
http://www.securityfocus.com/archive/1/504869/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/51686
http://secunia.com/advisories/35821
http://www.osvdb.org/55825
http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt
http://www.securityfocus.com/archive/1/504869/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/51686