CVE-2006-4244: SQL-Ledger

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value.

Affected products

• SQL-Ledger SQL-Ledger: version 2.4.4 only; version 2.4.5 only; version 2.4.6 only; version 2.4.7 only; version 2.4.8 only; version 2.4.9 only; …

Published 2006-08-31. Last modified 2026-06-16.