Vulnerabilities

TI-2007-03918 CVE-2007-4050 · GHSA-8h2r-r59q-86xf

Unspecified vulnerability in WebUI in ADempiere Bazaar before 3.3 beta Victoria edition…

MEDIUM 48

Unspecified vulnerability in WebUI in ADempiere Bazaar before 3.3 beta Victoria edition allows remote attackers to access system-level windows via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03004 Published 2007-07-30 No fix listed

TI-2007-02671 CVE-2007-2760 · GHSA-hrr8-7rwv-p26v

The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly…

MEDIUM 42

The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote authenticated read-only users to gain read-write privileges.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.01734 Published 2007-05-18 No fix listed

TI-2007-02670 CVE-2007-2759 · GHSA-4xpg-4j7x-7mgm

Multiple SQL injection vulnerabilities in the insert function in the ValuePreference…

LOW 36

Multiple SQL injection vulnerabilities in the insert function in the ValuePreference class (grid/ed/ValuePreference.java) in Adempiere before 3.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) m_A…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01689 Published 2007-05-18 No fix listed

Vulnerabilities

Filters

Unspecified vulnerability in WebUI in ADempiere Bazaar before 3.3 beta Victoria edition…

The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly…

Multiple SQL injection vulnerabilities in the insert function in the ValuePreference…