Skip to content
Noroxi

ledgersmb records

18 published records for vendor ledgersmb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
44.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 21
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2007-1329
    42Plan

    Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files,

    CriticalCVSS 10.0No exploitEPSS 5%

    ledgersmb · ledgersmbMar 7, 2007

  • CVE-2007-3907
    41Plan

    Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to bypass authentication and perform certain

    CriticalCVSS 10.0No exploitEPSS 2%

    ledgersmb · ledgersmbJul 19, 2007

  • CVE-2007-5372
    41Plan

    Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to exe

    CriticalCVSS 10.0No exploitEPSS 2%

    ledgersmb · ledgersmbOct 11, 2007

  • CVE-2018-9246
    40Plan

    The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable

    CriticalCVSS 9.8No exploitEPSS 2%

    ledgersmb · ledgersmbJun 7, 2018

  • CVE-2021-3693
    39Monitor

    Cross-site Scripting (XSS) - DOM in ledgersmb/ledgersmb

    CriticalCVSS 9.6No exploitEPSS 3%

    ledgersmb · ledgersmbAug 23, 2021

  • CVE-2021-3694
    39Monitor

    Cross-site Scripting (XSS) - Reflected in ledgersmb/ledgersmb

    CriticalCVSS 9.6No exploitEPSS 2%

    ledgersmb · ledgersmbAug 23, 2021

  • CVE-2007-1437
    37Monitor

    Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly byp

    CriticalCVSS 9.0No exploitEPSS 3%

    ledgersmb · ledgersmbMar 13, 2007

  • CVE-2008-4077
    32Monitor

    The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of serv

    HighCVSS 7.8No exploitEPSS 2%

    ledgersmb · ledgersmbSep 15, 2008

  • CVE-2007-1923
    31Monitor

    (1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remo

    HighCVSS 7.5No exploitEPSS 2%

    ledgersmb · ledgersmbApr 10, 2007

  • CVE-2007-1436
    31Monitor

    Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to bypass authenticatio

    HighCVSS 7.5No exploitEPSS 1%

    ledgersmb · ledgersmbMar 13, 2007

  • CVE-2006-5589
    30Monitor

    Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via un

    HighCVSS 7.5No exploitEPSS 1%

    ledgersmb · ledgersmbOct 27, 2006

  • CVE-2024-23831
    30Monitor

    Privilege escalation through CSRF attack on 'setup.pl'

    HighCVSS 7.5No exploitEPSS 0%

    ledgersmb · ledgersmbFeb 2, 2024

  • CVE-2007-0667
    27Monitor

    The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to execute arbitrary co

    MediumCVSS 6.5No exploitEPSS 1%

    ledgersmb · ledgersmbFeb 2, 2007

  • CVE-2021-3882
    27Monitor

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb

    MediumCVSS 6.8No exploitEPSS 1%

    ledgersmb · ledgersmbOct 14, 2021

  • CVE-2008-4078
    26Monitor

    SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allo

    MediumCVSS 6.5No exploitEPSS 1%

    ledgersmb · ledgersmbSep 15, 2008

  • CVE-2006-4731
    22Monitor

    Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0

    MediumCVSS 5.0Proof of conceptEPSS 6%

    ledgersmb · ledgersmbSep 12, 2006

  • CVE-2007-1540
    19Monitor

    Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows remote attackers to

    MediumCVSS 4.3Proof of conceptEPSS 5%

    ledgersmb · ledgersmbMar 20, 2007

  • CVE-2021-3731
    18Monitor

    Improper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmb

    MediumCVSS 4.7No exploitEPSS 1%

    ledgersmb · ledgersmbAug 23, 2021