CVE-2009-3582: SQL-Ledger

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the (1) id and possibly (2) db parameters in a Delete action to the output of a Vendors>Reports>Search search operation.

Affected products

• SQL-Ledger SQL-Ledger: version 2.8.24 only

Published 2009-12-23. Last modified 2026-06-16.