CVE:CVE-2006-4798
CNNVD:CNNVD-200609-264
SQL-Ledger 2.4.4之前的版本将密码存储在查询字符串中，依赖于上下文的攻击者可以通过"引用站点"字段或浏览器历史记录来获取密码。
solution:Upgrade dws_systems_inc. sql-ledger to a higher version than 2.4.3,and avoid the version (,2.4.3]