TI-2009-02244 CVE-2009-2354 · GHSA-hm7r-j6jm-9r7pSQL injection vulnerability in the auth_checkpass function in the login page in NullLogic…Priority LOW 35SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic Groupware 1.2.7 allows remote attackers to execute arbitrary SQL commands via the username parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01051 · Published 2009-07-07 · No fix listed CWE-89