Lucene search
MitreCVELIST:CVE-2009-3581HistoryDec 23, 2009 - 6:00 p.m.
CVE-2009-3581
2009-12-2318:00:00
mitre
www.cve.org
9
Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via (1) the DCN Description field in the Accounts Receivables menu item for Add Transaction, (2) the Description field in the Accounts Payable menu item for Add Transaction, or the name field in (3) the Customers menu item for Add Customer or (4) the Vendor menu item for Add Vendor.
Related
debiancve
debiancve
CVE-2009-3581
2009-12-23 18:30:00
cve
cve
CVE-2009-3581
2009-12-23 18:30:00
ubuntucve
ubuntucve
CVE-2009-3581
2009-12-23 00:00:00
prion
prion
Cross site scripting
2009-12-23 18:30:00
nvd
nvd
CVE-2009-3581
2009-12-23 18:30:00
seebug
seebug
SQL-Ledger ERP多个输入验证和绕过安全限制漏洞
2009-12-25 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2009-12-22 00:00:00
SQL-Ledger – several vulnerabilities
2009-12-22 00:00:00
packetstorm
packetstorm
SQL-Ledger XSS / XSRF / SQL Injection / LFI
2009-12-22 00:00:00
openvas
openvas
SQL-Ledger Multiple Vulnerabilities
2009-12-31 00:00:00
SQL-Ledger Multiple Vulnerabilities
2009-12-31 00:00:00