CVE-2009-3582

Source
https://cve.org/CVERecord?id=CVE-2009-3582
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2009-3582.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2009-3582
Downstream
Withdrawn
2026-01-27T04:09:59.060208Z
Published
2009-12-23T18:30:00Z
Modified
2026-01-27T04:09:59.060208Z
Summary
[none]
Details

Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the (1) id and possibly (2) db parameters in a Delete action to the output of a Vendors>Reports>Search search operation.

References

Affected packages