CVE-2009-3581

Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via (1) the…

published December 23, 2009

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via (1) the DCN Description field in the Accounts Receivables menu item for Add Transaction, (2) the Description field in the Accounts Payable menu item for Add Transaction, or the name field in (3) the Customers menu item for Add Customer or (4) the Vendor menu item for Add Vendor.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01000 · 62.5th percentile
Published
2009-12-23T18:00Z
EPSS history
Timeline
  • 23 DEC 18:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via (1) the…
    cvelistv5