Unrated severityNVD Advisory· Published Jul 7, 2009· Updated Jun 16, 2026

CVE-2009-2355

Description

The forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial of service (application crash) by specifying (1) an empty string or (2) a non-numeric string when selecting a forum, related to the fmessagelist function.

Affected products

Dan Cahill/Nulllogic Groupware
cpe:2.3:a:dan_cahill:nulllogic_groupware:1.2.7:*:*:*:*:*:*:*
Nulllogic/Groupwarellm-fuzzy
Range: = 1.2.7

Patches

Vulnerability mechanics

References

www.nth-dimension.org.uk/utils/get.phpnvd
www.securityfocus.com/archive/1/504737/100/0/threadednvd
www.vupen.com/english/advisories/2009/1817nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000