296,336
Total vulnerabilities in the database
SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.
CVSS v2:
No CWE or OWASP classifications available.