packetstormsecurity.org
http://packetstormsecurity.org/0909-exploits/heat-sql.txt CVE-2009-3642
HEAT Call Logging 8.01 - SQL Injection
Record summary
CVE-2009-3642 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBHEAT Call Logging 8.01 - SQL InjectionExploitDB exploitby 0 0Not analyzed1 file
References
336900Third-party advisory
http://secunia.com/advisories/36900 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2009-3642