CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

228 matches found

OSV•added 2007/04/10 11:19 p.m.•4 views

CVE-2007-1923

1 LedgerSMB and 2 DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0...

6.5AI score

Exploits0References8

Prion•added 2007/04/10 11:19 p.m.•12 views

Improper access control

7.5CVSS6.9AI score0.01546EPSS

Exploits0References7Affected Software1

OSV•added 2007/04/10 11:19 p.m.•0 views

UBUNTU-CVE-2007-1923

7.5CVSS5.8AI score0.01546EPSS

Exploits0References2

OSV•added 2007/04/10 11:19 p.m.•1 views

DEBIAN-CVE-2007-1923

7.5CVSS7AI score0.01546EPSS

Exploits0References1

Positive Technologies•added 2007/04/10 12:0 a.m.•2 views

PT-2007-3268 · Dws Systems +2 · Sql-Ledger +2

Name of the Vulnerable Software and Affected Versions: LedgerSMB versions prior to 1.3.0 DWS Systems SQL-Ledger affected versions not specified Description: The issue allows remote attackers to access restricted functionality via direct requests, as access control lists are implemented by changin...

7.5CVSS6.2AI score0.01546EPSS

Exploits0References18

CVE•added 2007/04/10 12:0 a.m.•54 views

CVE-2007-1923

LedgerSMB and DWS Systems SQL-Ledger are affected by CVE-2007-1923 due to access-control weaknesses that let remote attackers access restricted functionality by directly requesting URLs. Affected LedgerSMB versions are prior to 1.3.0; PT-2007-3268 recommends upgrading LedgerSMB to 1.3.0 or later....

7.5CVSS6.7AI score0.01546EPSS

Exploits0References7Affected Software2

Cvelist•added 2007/04/10 12:0 a.m.•16 views

CVE-2007-1923

6.6AI score0.01546EPSS

Exploits0References7

Debian CVE•added 2007/04/10 12:0 a.m.•15 views

CVE-2007-1923

7.5CVSS6.4AI score0.01546EPSS

Exploits0

securityvulns•added 2007/04/06 12:0 a.m.•91 views

ACLS ineffective in SQL-Ledger and LedgerSMB

Hi all; I have decided to finally send to this list a serious security flaw in the design of SQL-Ledger all versions. LedgerSMB all versions is also affected but the problem with a workaround has been mentioned in our documentation since the fork. Ordinarily I would not make a big deal out of thi...

7.1AI score

Exploits0

seebug.org•added 2007/03/21 12:0 a.m.•20 views

LedgerSMB/SQL-Ledger login本地文件包含和验证绕过漏洞

SQL-Ledger/LedgerSMB是开源的ERP系统。 SQL-Ledger/LedgerSMB不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。问题是'am.pl'脚本对用户提交的'login'参数缺少过滤，提交恶意脚本代码作为参数数据，并诱使用户访问，可导致获得目标用户敏感信息。 SQL-Ledger SQL-Ledger 2.6.26 SQL-Ledger SQL-Ledger 2.6.25 SQL-Ledger SQL-Ledger 2.6.21 SQL-Ledger SQL-Ledger 2.6.19 SQL-Ledger SQL-Ledge...

7.1AI score

Exploits0

UbuntuCve•added 2007/03/20 10:19 p.m.•23 views

CVE-2007-1541

Directory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks for the presence of a NULL %00 character to protect against directory traversal attacks, which allows remote attackers to run arbitrary executables and bypass authentication via a .. dot dot sequence in the login paramete...

7.5CVSS6AI score0.00472EPSS

Exploits0References1

OSV•added 2007/03/20 10:19 p.m.•4 views

CVE-2007-1541

7.3AI score

Exploits0References5

OSV•added 2007/03/20 10:19 p.m.•2 views

DEBIAN-CVE-2007-1540

Directory traversal vulnerability in am.pl in 1 SQL-Ledger 2.6.27 and earlier, and 2 LedgerSMB before 1.2.0, allows remote attackers to run arbitrary executables and bypass authentication via a .. dot dot sequence and trailing NULL %00 in the login parameter. NOTE: this issue was reportedly...

4.3CVSS7.1AI score0.08245EPSS

Exploits0References1

OSV•added 2007/03/20 10:19 p.m.•4 views

CVE-2007-1540

7.2AI score

Exploits0References9

Prion•added 2007/03/20 10:19 p.m.•11 views

Directory traversal

7.5CVSS7.2AI score0.00472EPSS

Exploits0References5Affected Software1

Prion•added 2007/03/20 10:19 p.m.•13 views

Directory traversal