CVE-2009-2612 - SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter

Published Jul 27, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.01%

Description

SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

http://secunia.com/advisories/35614
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2607
Advisory

Link	Providers	Tags
http://secunia.com/advisories/35614		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2607		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 27, 2009

Updated Sep 17, 2024

Reserved Jul 27, 2009

Link CVE-2009-2612

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-2612

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jul 27, 2009

Updated Sep 17, 2024

Link EUVD-2009-2607

GitHub

No data