CVE-2009-3580

概要

参考情報

• secunia.com/advisories/37877 · Vendor Advisory
• securityfocus.com/archive/1/508559/100/0/threaded
• exchange.xforce.ibmcloud.com/vulnerabilities/54964

sql-ledger のその他の脆弱性

• CVE-2009-4402高 7.5The default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified administrative operations by providing an arbi…
• CVE-2009-3584中 5.0SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to cap…
• CVE-2009-3583中 5.1Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary…
• CVE-2009-3582中 6.5Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary S…
• CVE-2009-3581低 3.5Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or …