The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as part of shell command execution, resulting in shell code injection via the create(), run_file(), backup(), or restore() func...
Vendor
pgobject-util-dbadmin project vulnerabilities
1 published CVE affecting pgobject-util-dbadmin project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest pgobject-util-dbadmin project CVEs
Newest publication first
-
CriticalCVSS 9.8
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.