İçeriğe atla
Noroxi

ledgersmb kayıtları

ledgersmb üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%44,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2007-1329
    42Planlayın

    Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files,

    KritikCVSS 10,0İstismar yokEPSS %5

    ledgersmb · ledgersmb7 Mar 2007

  • CVE-2007-3907
    41Planlayın

    Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to bypass authentication and perform certain

    KritikCVSS 10,0İstismar yokEPSS %3

    ledgersmb · ledgersmb19 Tem 2007

  • CVE-2007-5372
    41Planlayın

    Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to exe

    KritikCVSS 10,0İstismar yokEPSS %2

    ledgersmb · ledgersmb11 Eki 2007

  • CVE-2018-9246
    40Planlayın

    The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable

    KritikCVSS 9,8İstismar yokEPSS %3

    ledgersmb · ledgersmb7 Haz 2018

  • CVE-2021-3693
    39İzleyin

    Cross-site Scripting (XSS) - DOM in ledgersmb/ledgersmb

    KritikCVSS 9,6İstismar yokEPSS %3

    ledgersmb · ledgersmb23 Ağu 2021

  • CVE-2021-3694
    39İzleyin

    Cross-site Scripting (XSS) - Reflected in ledgersmb/ledgersmb

    KritikCVSS 9,6İstismar yokEPSS %3

    ledgersmb · ledgersmb23 Ağu 2021

  • CVE-2007-1437
    37İzleyin

    Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly byp

    KritikCVSS 9,0İstismar yokEPSS %3

    ledgersmb · ledgersmb13 Mar 2007

  • CVE-2008-4077
    32İzleyin

    The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of serv

    YüksekCVSS 7,8İstismar yokEPSS %3

    ledgersmb · ledgersmb15 Eyl 2008

  • CVE-2007-1923
    31İzleyin

    (1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remo

    YüksekCVSS 7,5İstismar yokEPSS %3

    ledgersmb · ledgersmb10 Nis 2007

  • CVE-2007-1436
    31İzleyin

    Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to bypass authenticatio

    YüksekCVSS 7,5İstismar yokEPSS %2

    ledgersmb · ledgersmb13 Mar 2007

  • CVE-2006-5589
    30İzleyin

    Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via un

    YüksekCVSS 7,5İstismar yokEPSS %1

    ledgersmb · ledgersmb27 Eki 2006

  • CVE-2024-23831
    30İzleyin

    Privilege escalation through CSRF attack on 'setup.pl'

    YüksekCVSS 7,5İstismar yokEPSS %0

    ledgersmb · ledgersmb2 Şub 2024

  • CVE-2007-0667
    27İzleyin

    The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to execute arbitrary co

    OrtaCVSS 6,5İstismar yokEPSS %2

    ledgersmb · ledgersmb2 Şub 2007

  • CVE-2021-3882
    27İzleyin

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb

    OrtaCVSS 6,8İstismar yokEPSS %1

    ledgersmb · ledgersmb14 Eki 2021

  • CVE-2008-4078
    26İzleyin

    SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allo

    OrtaCVSS 6,5İstismar yokEPSS %2

    ledgersmb · ledgersmb15 Eyl 2008

  • CVE-2006-4731
    22İzleyin

    Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0

    OrtaCVSS 5,0Kavram kanıtıEPSS %6

    ledgersmb · ledgersmb12 Eyl 2006

  • CVE-2007-1540
    18İzleyin

    Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows remote attackers to

    OrtaCVSS 4,3Kavram kanıtıEPSS %5

    ledgersmb · ledgersmb20 Mar 2007

  • CVE-2021-3731
    18İzleyin

    Improper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmb

    OrtaCVSS 4,7İstismar yokEPSS %1

    ledgersmb · ledgersmb23 Ağu 2021