Unrated severityNVD Advisory· Published Oct 2, 2009· Updated Apr 23, 2026

CVE-2009-3532

Description

Multiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2.3.3 on Windows allow remote attackers to execute arbitrary SQL commands via the (1) uname and (2) pword parameters. NOTE: some of these details are obtained from third party information.

Affected products

Logrover/Logrover2 versions
cpe:2.3:a:logrover:logrover:2.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:logrover:logrover:2.3:*:*:*:*:*:*:*
- cpe:2.3:a:logrover:logrover:2.3.3:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.osvdb.org/55825nvdExploit
secunia.com/advisories/35821nvdVendor Advisory
www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txtnvd
www.securityfocus.com/archive/1/504869/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/51686nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000