CVE-2009-3582

Source
https://nvd.nist.gov/vuln/detail/CVE-2009-3582
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2009-3582.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2009-3582
Downstream
Published
2009-12-23T18:30:00Z
Modified
2025-08-09T20:01:26Z
Summary
[none]
Details

Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the (1) id and possibly (2) db parameters in a Delete action to the output of a Vendors>Reports>Search search operation.

References

Affected packages