CVE-2009-3532: Multiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2.3.3 on Win...

Security readout for executives and security teams

LogRover versions 2.3 and 2.3.3 on Windows reportedly allow SQL injection through the login screen. A remote attacker may manipulate username or password input to run database queries, potentially bypassing authentication or accessing data. The record is old and partly third-party sourced, so confirm whether the product is still present. Exposure is likely limited to organizations still running LogRover 2.3 or 2.3.3 on Windows with the login.asp interface reachable. Internet exposure would materially increase risk. Modern environments may have low prevalence because the issue was published in 2009. Treat this as a targeted legacy exposure issue. If LogRover 2.3 or 2.3.3 is present and reachable, prioritize containment or removal because authentication bypass and database access risks can affect confidentiality and administrative control. Mitigation focus: Identify and retire LogRover 2.3 and 2.3.3 installations where possible.; Restrict access to LogRover login.asp to trusted administrative networks.; Check vendor or maintainer guidance for any historical fixed release or workaround..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.