CVE-2009-4402: SQL-Ledger

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified administrative operations by providing an arbitrary password to the admin interface.

Affected products

• SQL-Ledger SQL-Ledger: version 2.8.24 only

Published 2009-12-23. Last modified 2026-06-16.