CVE-2009-2354

ALTO 7.5CVE-2009-2354 · Published 07/07/2009 · updated 16/06/2026

En resumen

CVE-2009-2354 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a groupware (nulllogic).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 64.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
groupware nulllogic	`= 1.2.7`	No fix yet

Description

SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic Groupware 1.2.7 allows remote attackers to execute arbitrary SQL commands via the username parameter.

References

nth-dimension.org.uk/utils/get.php
securityfocus.com/archive/1/504737/100/0/threaded
vupen.com/english/advisories/2009/1817

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free