CVE-2009-4402

Mô tả

Tham khảo

• secunia.com/advisories/37877 · Vendor Advisory
• securityfocus.com/archive/1/508559/100/0/threaded
• securityfocus.com/bid/37431

Lỗ hổng khác của sql-ledger

• CVE-2009-3584TRUNG BÌNH 5.0SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to cap…
• CVE-2009-3583TRUNG BÌNH 5.1Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary…
• CVE-2009-3582TRUNG BÌNH 6.5Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary S…
• CVE-2009-3581THẤP 3.5Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or …
• CVE-2009-3580TRUNG BÌNH 6.8Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitr…