← back
CVE-2009-3582

CVE-2009-3582

EPSS 0.9%
Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the (1) id and possibly (2) db parameters in a Delete action to the output of a Vendors>Reports>Search search operation.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/37877https://exchange.xforce.ibmcloud.com/vulnerabilities/54966http://www.securityfocus.com/archive/1/508559/100/0/threadedhttp://www.securityfocus.com/bid/37431