Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution.
References
Link | Resource |
---|---|
http://secunia.com/advisories/24363 | Vendor Advisory |
http://secunia.com/advisories/24366 | Vendor Advisory |
http://securityreason.com/securityalert/2435 | |
http://www.securityfocus.com/archive/1/461944/100/100/threaded |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2007-03-13 19:19
Updated : 2024-02-28 11:01
NVD link : CVE-2007-1437
Mitre link : CVE-2007-1437
CVE.ORG link : CVE-2007-1437
JSON object : View
Products Affected
ledgersmb
- ledgersmb
sql-ledger
- sql-ledger
CWE