CVE-2006-4731

2006-09-1300:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2006

4731

directory traversal

admin.pl

sql-ledger

ledgersmb

remote code execution

7.5 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.013 Low

EPSS

Percentile

85.4%

JSON

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing …/ (dot dot slash).

CPENameOperatorVersion
dws_systems_inc.:sql-ledgerdws systems inc. sql-ledgereq2.6.14
dws_systems_inc.:sql-ledgerdws systems inc. sql-ledgereq2.4.10
dws_systems_inc.:sql-ledgerdws systems inc. sql-ledgereq2.4.7
dws_systems_inc.:sql-ledgerdws systems inc. sql-ledgereq2.2.3
dws_systems_inc.:sql-ledgerdws systems inc. sql-ledgereq2.6.12
dws_systems_inc.:sql-ledgerdws systems inc. sql-ledgereq2.2.5
dws_systems_inc.:sql-ledgerdws systems inc. sql-ledgereq2.4.6
dws_systems_inc.:sql-ledgerdws systems inc. sql-ledgereq2.6.15
dws_systems_inc.:sql-ledgerdws systems inc. sql-ledgereq2.6.6
dws_systems_inc.:sql-ledgerdws systems inc. sql-ledgereq2.6.3

CPE	Name	Operator	Version
dws_systems_inc.:sql-ledger	dws systems inc. sql-ledger	eq	2.6.14
dws_systems_inc.:sql-ledger	dws systems inc. sql-ledger	eq	2.4.10
dws_systems_inc.:sql-ledger	dws systems inc. sql-ledger	eq	2.4.7
dws_systems_inc.:sql-ledger	dws systems inc. sql-ledger	eq	2.2.3
dws_systems_inc.:sql-ledger	dws systems inc. sql-ledger	eq	2.6.12
dws_systems_inc.:sql-ledger	dws systems inc. sql-ledger	eq	2.2.5
dws_systems_inc.:sql-ledger	dws systems inc. sql-ledger	eq	2.4.6
dws_systems_inc.:sql-ledger	dws systems inc. sql-ledger	eq	2.6.15
dws_systems_inc.:sql-ledger	dws systems inc. sql-ledger	eq	2.6.6
dws_systems_inc.:sql-ledger	dws systems inc. sql-ledger	eq	2.6.3