CVE-2006-4798

SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.

Date published : 2006-09-14

http://www.securityfocus.com/archive/1/445512

http://securityreason.com/securityalert/1579