QwikSec

Security Database

CVE

CWE

Training

CVE-2009-3580

Published: Dec 23, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, new_password, and confirm_password parameters in a preferences action.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

sqlledger-am-csrf(54964)

vdb-entry

x_refsource_XF

20091221 SQL-Ledger â?? several vulnerabilities

mailing-list

x_refsource_BUGTRAQ

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.