CVE-2007-1923

概要

参考情報

• osvdb.org/38217 · Broken Link
• osvdb.org/38218 · Broken Link
• securityreason.com/securityalert/2552 · Third Party Advisory
• securityfocus.com/archive/1/464880/100/0/threaded · Third Party Advisory
• securityfocus.com/bid/23352 · Broken Link
• exchange.xforce.ibmcloud.com/vulnerabilities/33494 · Third Party Advisory
• ledgersmb/LedgerSMB · Release Notes

ledgersmb のその他の脆弱性

• CVE-2024-23831高 7.5LedgerSMB is a free web-based double-entry accounting system. When a LedgerSMB database administrator has an active session in /setup.pl, an…
• CVE-2021-3882中 6.8LedgerSMB does not set the 'Secure' attribute on the session authorization cookie when the client uses HTTPS and the LedgerSMB server is beh…
• CVE-2021-3731中 4.7LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This allows an attacker …
• CVE-2021-3694緊急 9.6LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user,…
• CVE-2021-3693緊急 9.6LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL to an authenticated …