sql-ledger sql-ledger 2.6.25 vulnerabilities and exploits

(subscribe to this query)

The redirect function in Form.pm for (1) LedgerSMB prior to 1.1.5 and (2) SQL-Ledger allows remote authenticated users to execute arbitrary code via redirects, related to callbacks, a different issue than CVE-2006-5872.

Sql-ledger Sql-ledger 2.4.7 Sql-ledger Sql-ledger 2.6.19 Sql-ledger Sql-ledger 2.6.17 Sql-ledger Sql-ledger 2.6.25 Sql-ledger Sql-ledger 2.6.18 Ledgersmb Ledgersmb Sql-ledger Sql-ledger 2.6.21

Directory traversal vulnerability in SQL-Ledger, and LedgerSMB prior to 1.1.5, allows remote malicious users to read and overwrite arbitrary files, and execute arbitrary code, via . (dot) characters adjacent to (1) users and (2) users/members strings, which are removed by blackli...

Sql-ledger Sql-ledger 2.6.25 Ledgersmb Ledgersmb

Unspecified vulnerability in LedgerSMB prior to 1.1.5 and SQL-Ledger prior to 2.6.25 allows remote malicious users to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns f...

Ledgersmb Ledgersmb 1.1.0 Ledgersmb Ledgersmb 1.0.0 Sql-ledger Sql-ledger Ledgersmb Ledgersmb 1.1.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook