CVE

Id
40967  
CVE No.
CVE-2009-3532  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2.3.3 on Windows allow remote attackers to execute arbitrary SQL commands via the (1) uname and (2) pword parameters. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20091002)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
448529 40967 CVE-2009-3532 BUGTRAQ:20090713 DDIVRT-2009-26 LogRover SQL Injection Authentication Bypass  View
448530 40967 CVE-2009-3532 URL:http://www.securityfocus.com/archive/1/archive/1/504869/100/0/threaded  View
448531 40967 CVE-2009-3532 MISC:http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt  View
448532 40967 CVE-2009-3532 OSVDB:55825  View
448533 40967 CVE-2009-3532 URL:http://www.osvdb.org/55825  View
448534 40967 CVE-2009-3532 SECUNIA:35821  View
448535 40967 CVE-2009-3532 URL:http://secunia.com/advisories/35821  View
448536 40967 CVE-2009-3532 XF:logrover-login-sql-injection(51686)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42814 JVNDB-2009-003821 EpicDJSoftware EpicVJ におけるスタックベースのバッファオーバーフローの脆弱性 EpicDJSoftware EpicVJ には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-3536 40967 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003821.html  View