Dws Systems Inc.

Sql-ledger

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2007-5372

  • EPSS 2.39%
  • Published 11.10.2007 10:17:00
  • Last modified 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field.

7.5

CVE-2006-5872

  • EPSS 1.22%
  • Published 18.12.2006 00:28:00
  • Last modified 09.04.2025 00:30:58

login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.

5

CVE-2006-4798

Exploit
  • EPSS 0.39%
  • Published 14.09.2006 21:07:00
  • Last modified 03.04.2025 01:03:51

SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.

5

CVE-2006-4731

  • EPSS 19.2%
  • Published 13.09.2006 00:07:00
  • Last modified 03.04.2025 01:03:51

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containin...