CVE-2009-2354

The CVE-2009-2354 entry concerns NullLogic Groupware 1.2.7 with an SQL injection in the auth_checkpass function of the login page, allowing remote attackers to execute arbitrary SQL via the username parameter. OpenVAS entries confirm multiple vulnerabilities affecting NullLogic Groupware