CVE-2009-3581 - CVE House
Back to Database
Status published Low CVE-2009-3581

Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via (1) the DCN Description field in the Accounts Receivables menu item for Add Transaction, (2) the Description field in the Accounts Payable menu item for Add Transaction, or the name field in (3) the Customers menu item for Add Customer or (4) the Vendor menu item for Add Vendor.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-3581

Credits & Attribution

No credits recorded in the NVD database.

References

More from sql-ledger

View All →
CVE-2009-4402
The default configuration of SQL-Ledger 2.8.24 allows remote attackers to...
High 7.5
CVE-2009-3584
SQL-Ledger 2.8.24 does not set the secure flag for the...
Medium 5
CVE-2009-3583
Directory traversal vulnerability in the Preferences menu item in SQL-Ledger...
Medium 5.1
CVE-2009-3582
Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger...
Medium 6.5
CVE-2009-3580
Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24...
Medium 6.8

Affected Vendor

Affected Software

sql-ledger
Vulnerable Versions:
2.8.24

Timeline

Official Publish: December 23rd, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.