CVE-2007-0667

Mô tả

Tham khảo

• securityreason.com/securityalert/2217
• securityfocus.com/archive/1/458464/100/0/threaded
• securityfocus.com/archive/1/459264/100/0/threaded
• securityfocus.com/bid/22295
• vupen.com/english/advisories/2007/0407 · Vendor Advisory

Lỗ hổng khác của ledgersmb

• CVE-2024-23831CAO 7.5LedgerSMB is a free web-based double-entry accounting system. When a LedgerSMB database administrator has an active session in /setup.pl, an…
• CVE-2021-3882TRUNG BÌNH 6.8LedgerSMB does not set the 'Secure' attribute on the session authorization cookie when the client uses HTTPS and the LedgerSMB server is beh…
• CVE-2021-3731TRUNG BÌNH 4.7LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This allows an attacker …
• CVE-2021-3694NGHIÊM TRỌNG 9.6LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user,…
• CVE-2021-3693NGHIÊM TRỌNG 9.6LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL to an authenticated …