CVE-2006-5589

概要

参考情報

• secunia.com/advisories/22483 · Vendor Advisory
• sourceforge.net/project/shownotes.php
• securityfocus.com/archive/1/464789/100/200/threaded
• securityfocus.com/bid/20749
• vupen.com/english/advisories/2006/4209

ledgersmb のその他の脆弱性

• CVE-2024-23831高 7.5LedgerSMB is a free web-based double-entry accounting system. When a LedgerSMB database administrator has an active session in /setup.pl, an…
• CVE-2021-3882中 6.8LedgerSMB does not set the 'Secure' attribute on the session authorization cookie when the client uses HTTPS and the LedgerSMB server is beh…
• CVE-2021-3731中 4.7LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This allows an attacker …
• CVE-2021-3694緊急 9.6LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user,…
• CVE-2021-3693緊急 9.6LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL to an authenticated …