CVE-2009-3642

FrontRange HEAT 8.01 - SQL Injection via Call Logging Username and Password Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-3642. PoCs published by 0 0.

AI-analyzed exploit summary This is a writeup describing an SQL injection vulnerability in HEAT Call Logging Version 8.01. The exploit demonstrates an authentication bypass using SQL injection in the username and password fields.

Description

Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

Exploits (1)

exploitdb WRITEUP VERIFIED
by 0 0 · textwebappsasp
https://www.exploit-db.com/exploits/9809

This is a writeup describing an SQL injection vulnerability in HEAT Call Logging Version 8.01. The exploit demonstrates an authentication bypass using SQL injection in the username and password fields.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: HEAT Call Logging Version 8.01
No auth needed
Prerequisites: Access to the login page of the HEAT Call Logging application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36900

Scores

EPSS 0.0097
EPSS Percentile 57.4%

Details

CWE
CWE-89
Status published
Products (1)
frontrange/heat 8.01
Published Oct 09, 2009
Tracked Since Feb 18, 2026