Ledgersmb vulnerabilities

Products

• Ledgersmb 18
• Ledgersmb/ledgersmb 4

Newest

• ledgersmb Privilege escalation through CSRF attack on 'setup.pl' CVE-2024-23831 Fix available 7.5 HighFebruary 2, 2024
• ledgersmb, ledgersmb ledgersmb/ledgersmb +1 more Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb CVE-2021-3882 Fix available 5.9 MediumOctober 14, 2021
• ledgersmb, ledgersmb ledgersmb/ledgersmb, debian linux +2 more Improper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmb CVE-2021-3731 Fix available 5.9 MediumAugust 23, 2021
• ledgersmb, ledgersmb ledgersmb/ledgersmb, debian linux +2 more Cross-site Scripting (XSS) - Reflected in ledgersmb/ledgersmb CVE-2021-3694 Fix available 8.2 HighAugust 23, 2021
• ledgersmb, ledgersmb ledgersmb/ledgersmb, debian linux +2 more Cross-site Scripting (XSS) - DOM in ledgersmb/ledgersmb CVE-2021-3693 Fix available 8.8 HighAugust 23, 2021
• ledgersmb, pgobject-util-dbadmin project pgobject-util-dbadmin +1 more The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x,... CVE-2018-9246 Fix available 9.8 CriticalJune 8, 2018
• ledgersmb, sql-ledger +1 more SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15... CVE-2008-4078 6.5 MediumSeptember 15, 2008
• ledgersmb, sql-ledger +1 more The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow... CVE-2008-4077 7.8 HighSeptember 15, 2008
• dws systems inc. sql-ledger, ledgersmb +1 more Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems... CVE-2007-5372 10.0 HighOctober 11, 2007
• ledgersmb Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to... CVE-2007-3907 10.0 HighJuly 19, 2007
• ledgersmb, sql-ledger +1 more (1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set... CVE-2007-1923 7.5 HighApril 10, 2007
• ledgersmb, sql-ledger +1 more Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2)... CVE-2007-1540 Public exploitFix available 4.3 MediumMarch 20, 2007
• ledgersmb, sql-ledger +1 more Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote... CVE-2007-1437 Fix available 9.0 HighMarch 13, 2007
• ledgersmb, sql-ledger +1 more Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9... CVE-2007-1436 Fix available 7.5 HighMarch 13, 2007
• ledgersmb, sql-ledger +1 more Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote... CVE-2007-1329 10.0 HighMarch 7, 2007
• ledgersmb, sql-ledger +1 more The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote... CVE-2007-0667 6.5 MediumFebruary 2, 2007
• ledgersmb Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote... CVE-2006-5589 7.5 HighOctober 27, 2006
• dws systems inc. sql-ledger, ledgersmb +1 more Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger... CVE-2006-4731 Public exploitFix available 5.0 MediumSeptember 13, 2006