CVE-2009-0458 - CVE House
Back to Database
Status published High CVE-2009-0458

Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware...

Vulnerability Description

Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field). NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0458

Credits & Attribution

No credits recorded in the NVD database.

References

More from wholehogsoftware

View All →
CVE-2009-0461
Whole Hog Password Protect: Enhanced 1.x allows remote attackers to...
High 7.5
CVE-2009-0460
Whole Hog Ware Support 1.x allows remote attackers to bypass...
High 7.5
CVE-2009-0459
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password...
High 7.5

Affected Vendor

wholehogsoftware

View all reports →

Affected Software

ware support
Vulnerable Versions:
1.0

Timeline

Official Publish: February 6th, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.