CVE-2006-4244
EPSS 1.6%sql-ledger
發布日:2006/8/31修改日:2026/4/28
也稱為:DEBIAN-CVE-2006-4244
描述
SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value.
受影響套件(2)
- Debian/sql-ledgerfrom 0, < 2.6.18-1
- Debian/sql-ledgerfrom 0, < 2.4.7-2sarge1