Browse CVEs

HIGH 7.5 CVE-2024-23831 LedgerSMB is a free web-based double-entry accounting system. When a LedgerSMB database administrator has an active session in /setup.pl, an attacker… Ledgersmb 1.10.30 / 1.11.9+ Fix from $1,9502024-02-02 MEDIUM 6.8 CVE-2021-3882 LedgerSMB does not set the 'Secure' attribute on the session authorization cookie when the client uses HTTPS and the LedgerSMB server is behind a rev… Ledgersmb 1.8.22+ Fix from $1,6002021-10-14 HIGH 7.8 CVE-2008-4077 The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service (reso… Ledgersmb 1.2.15+ Fix from $1,9502008-09-15 MEDIUM 6.5 CVE-2008-4078 SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allows remote… Ledgersmb 1.2.15+ Fix from $1,6002008-09-15 HIGH 10.0 CVE-2007-3907 Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to bypass authentication and perform certain actions a… Ledgersmb Mitigation only Fix from $1,9502007-07-19 HIGH 7.5 CVE-2007-1923 (1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attack… Ledgersmb 1.3.0+ Fix from $1,9502007-04-10 HIGH 9.0 CVE-2007-1437 Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authe… Ledgersmb after 2.6.24 Fix from $1,9502007-03-13 HIGH 7.5 CVE-2007-1436 Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to bypass authentication via unk… Ledgersmb after 2.6.25 Fix from $1,9502007-03-13 HIGH 10.0 CVE-2007-1329EPSS 5% Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execu… Ledgersmb after 1.1.1 Fix from $1,9502007-03-07 MEDIUM 6.5 CVE-2007-0667 The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to execute arbitrary code via re… Ledgersmb after 1.1.1 Fix from $1,6002007-02-02 HIGH 7.5 CVE-2006-5589 Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified… Ledgersmb after 1.1.0 Fix from $1,9502006-10-27