sql-ledger

20 results · Feed

• Unscored —
  CVE-2009-4402

  The default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified administrative operations…

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2009-3582

  Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users t…

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2009-3580

  Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the aut…

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2009-3581

  Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arb…

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2009-3584

  SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for re…

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2009-3583

  Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include …

  sql-ledger sql-ledger Debian Ubuntu
  Dec 23, 2009
• Unscored —
  CVE-2008-4077

  The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to c…

  sql-ledger Debian
  Sep 15, 2008
• Unscored —
  CVE-2008-4078

  SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.…

  sql-ledger Debian
  Sep 15, 2008
• Unscored —
  CVE-2007-5372

  Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow re…

  sql-ledger Debian
  Oct 11, 2007
• Unscored —
  CVE-2007-1923

  (1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from men…

  sql-ledger sql-ledger Debian Ubuntu
  Apr 10, 2007
• Unscored —
  CVE-2007-1540 Public exploit

  Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows…

  sql-ledger Debian
  Mar 20, 2007
• Unscored —
  CVE-2007-1541

  Directory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks for the presence of a NULL (%00) character …

  sql-ledger Debian
  Mar 20, 2007
• Unscored —
  CVE-2007-1436

  Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to…

  sql-ledger Debian
  Mar 13, 2007
• Unscored —
  CVE-2007-1437

  Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite f…

  sql-ledger Debian
  Mar 13, 2007
• Unscored —
  CVE-2007-1329

  Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwr…

  sql-ledger sql-ledger Debian Ubuntu
  Mar 7, 2007
• Unscored —
  CVE-2007-0667

  The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to…

  sql-ledger sql-ledger Debian Ubuntu
  Feb 2, 2007
• Unscored —
  CVE-2006-5872

  login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code …

  sql-ledger Debian
  Dec 18, 2006
• Unscored —
  CVE-2006-4798

  SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain th…

  sql-ledger Debian
  Sep 14, 2006
• Unscored —
  CVE-2006-4731 Public exploit

  Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) L…

  sql-ledger Debian
  Sep 13, 2006
• Unscored —
  CVE-2006-4244

  SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie mat…

  sql-ledger Debian
  Aug 31, 2006