2008-09-15 17:14:07 2018-10-11 22:50:42

SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Sql-ledger Sql-ledger 2.8.7 (not an official CPE) Sql-ledger Sql-ledger 2.8.5 (not an official CPE) Sql-ledger Sql-ledger 2.8.6 (not an official CPE) Sql-ledger Sql-ledger 2.8.4 (not an official CPE) Sql-ledger Sql-ledger 2.8.3 (not an official CPE) Sql-ledger Sql-ledger 2.8.2 (not an official CPE) Sql-ledger Sql-ledger 2.8.0 (not an official CPE) Sql-ledger Sql-ledger 2.8.1 (not an official CPE) Sql-ledger Sql-ledger 2.6.27 (not an official CPE) Sql-ledger Sql-ledger 2.6.26 (not an official CPE) Sql-ledger Sql-ledger 2.6.25 (not an official CPE) Sql-ledger Sql-ledger 2.6.24 (not an official CPE) Sql-ledger Sql-ledger 2.6.23 (not an official CPE) Sql-ledger Sql-ledger 2.6.22 (not an official CPE) Sql-ledger Sql-ledger 2.6.21 (not an official CPE) Sql-ledger Sql-ledger 2.6.19 (not an official CPE) Sql-ledger Sql-ledger 2.6.20 (not an official CPE) Sql-ledger Sql-ledger 2.6.18 (not an official CPE) Sql-ledger Sql-ledger 2.6.17 (not an official CPE) Sql-ledger Sql-ledger 2.6.16 (not an official CPE) Sql-ledger Sql-ledger 2.6.15 (not an official CPE) Sql-ledger Sql-ledger 2.6.14 (not an official CPE) Sql-ledger Sql-ledger 2.6.13 (not an official CPE) Sql-ledger Sql-ledger 2.6.12 (not an official CPE) Sql-ledger Sql-ledger 2.6.11 (not an official CPE) Sql-ledger Sql-ledger 2.6.10 (not an official CPE) Sql-ledger Sql-ledger 2.6.9 (not an official CPE) Sql-ledger Sql-ledger 2.6.8 (not an official CPE) Sql-ledger Sql-ledger 2.6.7 (not an official CPE) Sql-ledger Sql-ledger 2.6.6 (not an official CPE) Sql-ledger Sql-ledger 2.6.4 (not an official CPE) Sql-ledger Sql-ledger 2.6.5 (not an official CPE) Sql-ledger Sql-ledger 2.6.3 (not an official CPE) Sql-ledger Sql-ledger 2.6.1 (not an official CPE) Sql-ledger Sql-ledger 2.6.2 (not an official CPE) Sql-ledger Sql-ledger 2.6.0 (not an official CPE) Sql-ledger Sql-ledger 2.4.16 (not an official CPE) Sql-ledger Sql-ledger 2.4.15 (not an official CPE) Sql-ledger Sql-ledger 2.4.14 (not an official CPE) Sql-ledger Sql-ledger 2.4.13 (not an official CPE) Sql-ledger Sql-ledger 2.4.12 (not an official CPE) Sql-ledger Sql-ledger 2.4.10 (not an official CPE) Sql-ledger Sql-ledger 2.4.11 (not an official CPE) Sql-ledger Sql-ledger 2.4.9 (not an official CPE) Sql-ledger Sql-ledger 2.4.8 (not an official CPE) Sql-ledger Sql-ledger 2.4.7 (not an official CPE) Sql-ledger Sql-ledger 2.4.6 (not an official CPE) Sql-ledger Sql-ledger 2.4.5 (not an official CPE) Sql-ledger Sql-ledger 2.4.4 (not an official CPE) Sql-ledger Sql-ledger (not an official CPE) Ledgersmb Ledgersmb 1.2.14 (not an official CPE) Ledgersmb Ledgersmb 1.2.13 (not an official CPE) Ledgersmb Ledgersmb 1.2.12 (not an official CPE) Ledgersmb Ledgersmb 1.2.11 (not an official CPE) Ledgersmb Ledgersmb 1.2.10 (not an official CPE) Ledgersmb Ledgersmb 1.2.8 (not an official CPE) Ledgersmb Ledgersmb 1.2.9 (not an official CPE) Ledgersmb Ledgersmb 1.2.7 (not an official CPE) Ledgersmb Ledgersmb 1.2.5 (not an official CPE) Ledgersmb Ledgersmb 1.2.6 (not an official CPE) Ledgersmb Ledgersmb 1.2.4 (not an official CPE) Ledgersmb Ledgersmb 1.2.3 (not an official CPE) Ledgersmb Ledgersmb 1.2.2 (not an official CPE) Ledgersmb Ledgersmb 1.2.1 (not an official CPE) Ledgersmb Ledgersmb 1.2.0 (not an official CPE) Ledgersmb Ledgersmb 1.1.8 (not an official CPE) Ledgersmb Ledgersmb 1.1.5 (not an official CPE) Ledgersmb Ledgersmb 1.1.1 (not an official CPE) Ledgersmb Ledgersmb 1.0.0 (not an official CPE) Ledgersmb Ledgersmb 1.1.0 (not an official CPE) Ledgersmb Ledgersmb (not an official CPE) Dws systems inc. Sql-ledger 2.6.27 (not an official CPE) Dws systems inc. Sql-ledger 2.6.18 (not an official CPE) Dws systems inc. Sql-ledger 2.6.17 (not an official CPE) Dws systems inc. Sql-ledger 2.6.16 (not an official CPE) Dws systems inc. Sql-ledger 2.6.15 (not an official CPE) Dws systems inc. Sql-ledger 2.6.14 (not an official CPE) Dws systems inc. Sql-ledger 2.6.13 (not an official CPE) Dws systems inc. Sql-ledger 2.6.12 (not an official CPE) Dws systems inc. Sql-ledger 2.6.11 (not an official CPE) Dws systems inc. Sql-ledger 2.6.10 (not an official CPE) Dws systems inc. Sql-ledger 2.6.9 (not an official CPE) Dws systems inc. Sql-ledger 2.6.8 (not an official CPE) Dws systems inc. Sql-ledger 2.6.7 (not an official CPE) Dws systems inc. Sql-ledger 2.6.6 (not an official CPE) Dws systems inc. Sql-ledger 2.6.5 (not an official CPE) Dws systems inc. Sql-ledger 2.6.4 (not an official CPE) Dws systems inc. Sql-ledger 2.6.3 (not an official CPE) Dws systems inc. Sql-ledger 2.6.2 (not an official CPE) Dws systems inc. Sql-ledger 2.6.1 (not an official CPE) Dws systems inc. Sql-ledger 2.4.16 (not an official CPE) Dws systems inc. Sql-ledger 2.4.15 (not an official CPE) Dws systems inc. Sql-ledger 2.4.14 (not an official CPE) Dws systems inc. Sql-ledger 2.4.13 (not an official CPE) Dws systems inc. Sql-ledger 2.4.12 (not an official CPE) Dws systems inc. Sql-ledger 2.4.11 (not an official CPE) Dws systems inc. Sql-ledger 2.4.10 (not an official CPE) Dws systems inc. Sql-ledger 2.4.9 (not an official CPE) Dws systems inc. Sql-ledger 2.4.8 (not an official CPE) Dws systems inc. Sql-ledger 2.4.7 (not an official CPE) Dws systems inc. Sql-ledger 2.4.6 (not an official CPE) Dws systems inc. Sql-ledger 2.4.5 (not an official CPE) Dws systems inc. Sql-ledger 2.4.4 (not an official CPE) Dws systems inc. Sql-ledger 2.4.3 (not an official CPE) Dws systems inc. Sql-ledger 2.4.2 (not an official CPE) Dws systems inc. Sql-ledger 2.4.1 (not an official CPE) Dws systems inc. Sql-ledger 2.4.0 (not an official CPE) Dws systems inc. Sql-ledger 2.2.7 (not an official CPE) Dws systems inc. Sql-ledger 2.2.6 (not an official CPE) Dws systems inc. Sql-ledger 2.2.5 (not an official CPE) Dws systems inc. Sql-ledger 2.2.4 (not an official CPE) Dws systems inc. Sql-ledger 2.2.3 (not an official CPE) Dws systems inc. Sql-ledger 2.2.2 (not an official CPE) Dws systems inc. Sql-ledger 2.2.1 (not an official CPE) Dws systems inc. Sql-ledger 2.2.0 (not an official CPE) Dws systems inc. Sql-ledger (not an official CPE) Sql-ledger Sql-ledger 2.8.8 (not an official CPE) Sql-ledger Sql-ledger 2.8.9 (not an official CPE) Sql-ledger Sql-ledger 2.8.10 (not an official CPE) Sql-ledger Sql-ledger 2.8.11 (not an official CPE) Sql-ledger Sql-ledger 2.8.12 (not an official CPE) Sql-ledger Sql-ledger 2.8.13 (not an official CPE) Sql-ledger Sql-ledger 2.8.14 (not an official CPE) Sql-ledger Sql-ledger 2.8.15 (not an official CPE) Sql-ledger Sql-ledger 2.8.16 (not an official CPE) Sql-ledger Sql-ledger 2.8.17 (not an official CPE)