CVE-2009-4402

概要

参考情報

• secunia.com/advisories/37877 · Vendor Advisory
• securityfocus.com/archive/1/508559/100/0/threaded
• securityfocus.com/bid/37431

sql-ledger のその他の脆弱性

• CVE-2009-3584中 5.0SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to cap…
• CVE-2009-3583中 5.1Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary…
• CVE-2009-3582中 6.5Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary S…
• CVE-2009-3581低 3.5Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or …
• CVE-2009-3580中 6.8Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitr…