CVE-2009-2612

CVE-2009-2612 describes an SQL injection in ProSMDR’s login.aspx via the txtUser parameter, enabling remote execution of arbitrary SQL commands. Multiple sources (NVD, Red Hat, CVE records) confirm the vulnerability exists and references to third-party provenance (no vendor-supplied exploit detai...