Vulnerabilities > Pgobject Util Dbadmin Project > Pgobject Util Dbadmin > High

DATE	CVE	VULNERABILITY TITLE	RISK
2018-06-08	CVE-2018-9246	Improper Encoding or Escaping of Output vulnerability in multiple products The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as part of shell command execution, resulting in shell code injection via the create(), run_file(), backup(), or restore() function. network low complexity pgobject-util-dbadmin-project ledgersmb CWE-116	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.