CVE-2006-4244
HIGH
7.5
CVSS Severity Score
Vulnerability Description
SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value.
Affected Platforms (CPE)
📦
Sql Ledger
Sql Ledger
= 2.4.4📦
Sql Ledger
Sql Ledger
= 2.4.5📦
Sql Ledger
Sql Ledger
= 2.4.6📦
Sql Ledger
Sql Ledger
= 2.4.7📦
Sql Ledger
Sql Ledger
= 2.4.8📦
Sql Ledger
Sql Ledger
= 2.4.9📦
Sql Ledger
Sql Ledger
= 2.4.10📦
Sql Ledger
Sql Ledger
= 2.4.11📦
Sql Ledger
Sql Ledger
= 2.4.12📦
Sql Ledger
Sql Ledger
= 2.4.13📦
Sql Ledger
Sql Ledger
= 2.4.14📦
Sql Ledger
Sql Ledger
= 2.4.15📦
Sql Ledger
Sql Ledger
= 2.4.16📦
Sql Ledger
Sql Ledger
= 2.6.0📦
Sql Ledger
Sql Ledger
= 2.6.1📦
Sql Ledger
Sql Ledger
= 2.6.2📦
Sql Ledger
Sql Ledger
= 2.6.3📦
Sql Ledger
Sql Ledger
= 2.6.4📦
Sql Ledger
Sql Ledger
= 2.6.5📦
Sql Ledger
Sql Ledger
= 2.6.6📦
Sql Ledger
Sql Ledger
= 2.6.7📦
Sql Ledger
Sql Ledger
= 2.6.8📦
Sql Ledger
Sql Ledger
= 2.6.9📦
Sql Ledger
Sql Ledger
= 2.6.10📦
Sql Ledger
Sql Ledger
= 2.6.11📦
Sql Ledger
Sql Ledger
= 2.6.12📦
Sql Ledger
Sql Ledger
= 2.6.13📦
Sql Ledger
Sql Ledger
= 2.6.14📦
Sql Ledger
Sql Ledger
= 2.6.15📦
Sql Ledger
Sql Ledger
= 2.6.16📦
Sql Ledger