Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-3584HistoryDec 23, 2009 - 6:30 p.m.
CVE-2009-3584
2009-12-2318:30:00
Debian Security Bug Tracker
security-tracker.debian.org
3
0.004 Low
EPSS
Percentile
72.7%
SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | sql-ledger | <= 3.2.6-1 | sql-ledger_3.2.6-1_all.deb |
| Debian | 11 | all | sql-ledger | <= 3.2.6-1 | sql-ledger_3.2.6-1_all.deb |
| Debian | 10 | all | sql-ledger | <= 3.2.6-1 | sql-ledger_3.2.6-1_all.deb |
| Debian | 999 | all | sql-ledger | <= 3.2.6-1 | sql-ledger_3.2.6-1_all.deb |
| Debian | 13 | all | sql-ledger | <= 3.2.6-1 | sql-ledger_3.2.6-1_all.deb |
Related
prion
prion
Session fixation
2009-12-23 18:30:00
ubuntucve
ubuntucve
CVE-2009-3584
2009-12-23 00:00:00
cve
cve
CVE-2009-3584
2009-12-23 18:30:00
seebug
seebug
SQL-Ledger ERP多个输入验证和绕过安全限制漏洞
2009-12-25 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2009-12-22 00:00:00
FWD: LedgerSMB Security Advisory: Multiple Vulnerabilities
2010-01-26 00:00:00
SQL-Ledger – several vulnerabilities
2009-12-22 00:00:00
packetstorm
packetstorm
SQL-Ledger XSS / XSRF / SQL Injection / LFI
2009-12-22 00:00:00
openvas
openvas
SQL-Ledger Multiple Vulnerabilities
2009-12-31 00:00:00
SQL-Ledger Multiple Vulnerabilities
2009-12-31 00:00:00