CVE-2009-4402

Description

References

• secunia.com/advisories/37877 · Vendor Advisory
• securityfocus.com/archive/1/508559/100/0/threaded
• securityfocus.com/bid/37431

sql-ledger의 다른 취약점

• CVE-2009-3584보통 5.0SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to cap…
• CVE-2009-3583보통 5.1Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary…
• CVE-2009-3582보통 6.5Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary S…
• CVE-2009-3581낮음 3.5Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or …
• CVE-2009-3580보통 6.8Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitr…