Sql-ledger Security Vulnerabilities and Issues — Sql-ledger CVE List

Lucene search

Dws Systems Inc.Sql-ledger

2 matches found

CVE•added 2006/09/13 12:7 a.m.•49 views

CVE-2006-4731

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ (dot dot slash).

5CVSS7.5AI score0.18797EPSS

CVE•added 2006/09/14 9:7 p.m.•35 views

CVE-2006-4798

SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.

5CVSS6.5AI score0.00387EPSS