Package · Ubuntu

sql-ledger

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Feed

Unscored —

CVE-2009-4402

The default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified administrative operations…

sql-ledger sql-ledger Debian Ubuntu

Dec 23, 2009
Unscored —

CVE-2009-3582

Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users t…

sql-ledger sql-ledger Debian Ubuntu

Dec 23, 2009
Unscored —

CVE-2009-3580

Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the aut…

sql-ledger sql-ledger Debian Ubuntu

Dec 23, 2009
Unscored —

CVE-2009-3581

Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arb…

sql-ledger sql-ledger Debian Ubuntu

Dec 23, 2009
Unscored —

CVE-2009-3584

SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for re…

sql-ledger sql-ledger Debian Ubuntu

Dec 23, 2009
Unscored —

CVE-2009-3583

Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include …

sql-ledger sql-ledger Debian Ubuntu

Dec 23, 2009
Unscored —

CVE-2007-1923

(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from men…

sql-ledger sql-ledger Debian Ubuntu

Apr 10, 2007
Unscored —

CVE-2007-1329

Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwr…

sql-ledger sql-ledger Debian Ubuntu

Mar 7, 2007
Unscored —

CVE-2007-0667

The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to…

sql-ledger sql-ledger Debian Ubuntu

Feb 2, 2007