CVE-2006-4244

Published: Aug 31, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value.

Affected (31)

Products: Sql Ledger: Sql Ledger

Sql Ledger

1 product

Sql Ledger

Configuration A

31 vulnerable · 29 platform

Vulnerable Software	Affected Versions
Sql Ledger Sql Ledger	Version 2.4.10
Sql Ledger Sql Ledger	Version 2.4.11
Sql Ledger Sql Ledger	Version 2.4.12
Sql Ledger Sql Ledger	Version 2.4.13
Sql Ledger Sql Ledger	Version 2.4.14
Sql Ledger Sql Ledger	Version 2.4.15
Sql Ledger Sql Ledger	Version 2.4.16
Sql Ledger Sql Ledger	Version 2.4.4
Sql Ledger Sql Ledger	Version 2.4.5
Sql Ledger Sql Ledger	Version 2.4.6
Sql Ledger Sql Ledger	Version 2.4.7
Sql Ledger Sql Ledger	Version 2.4.8
Sql Ledger Sql Ledger	Version 2.4.9
Sql Ledger Sql Ledger	Version 2.6.0
Sql Ledger Sql Ledger	Version 2.6.10
Sql Ledger Sql Ledger	Version 2.6.11
Sql Ledger Sql Ledger	Version 2.6.12
Sql Ledger Sql Ledger	Version 2.6.13
Sql Ledger Sql Ledger	Version 2.6.14
Sql Ledger Sql Ledger	Version 2.6.15
Sql Ledger Sql Ledger	Version 2.6.16
Sql Ledger Sql Ledger	Version 2.6.17
Sql Ledger Sql Ledger	Version 2.6.1
Sql Ledger Sql Ledger	Version 2.6.2
Sql Ledger Sql Ledger	Version 2.6.3
Sql Ledger Sql Ledger	Version 2.6.4
Sql Ledger Sql Ledger	Version 2.6.5
Sql Ledger Sql Ledger	Version 2.6.6
Sql Ledger Sql Ledger	Version 2.6.7
Sql Ledger Sql Ledger	Version 2.6.8
Sql Ledger Sql Ledger	Version 2.6.9

Running on/with	Platform Versions
Sql Ledger Sql Ledger	Version 2.6.18
Sql Ledger Sql Ledger	Version 2.6.19
Sql Ledger Sql Ledger	Version 2.6.20
Sql Ledger Sql Ledger	Version 2.6.21
Sql Ledger Sql Ledger	Version 2.6.22
Sql Ledger Sql Ledger	Version 2.6.23
Sql Ledger Sql Ledger	Version 2.6.24
Sql Ledger Sql Ledger	Version 2.6.25
Sql Ledger Sql Ledger	Version 2.6.26
Sql Ledger Sql Ledger	Version 2.6.27
Sql Ledger Sql Ledger	Version 2.8.0
Sql Ledger Sql Ledger	Version 2.8.10
Sql Ledger Sql Ledger	Version 2.8.11
Sql Ledger Sql Ledger	Version 2.8.12
Sql Ledger Sql Ledger	Version 2.8.13
Sql Ledger Sql Ledger	Version 2.8.14
Sql Ledger Sql Ledger	Version 2.8.15
Sql Ledger Sql Ledger	Version 2.8.16
Sql Ledger Sql Ledger	Version 2.8.17
Sql Ledger Sql Ledger	Version 2.8.18
Sql Ledger Sql Ledger	Version 2.8.1
Sql Ledger Sql Ledger	Version 2.8.2
Sql Ledger Sql Ledger	Version 2.8.3
Sql Ledger Sql Ledger	Version 2.8.4
Sql Ledger Sql Ledger	Version 2.8.5
Sql Ledger Sql Ledger	Version 2.8.6
Sql Ledger Sql Ledger	Version 2.8.7
Sql Ledger Sql Ledger	Version 2.8.8
Sql Ledger Sql Ledger	Version 2.8.9