CVE-2007-1437

2007-03-1319:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-1437

ledgersmb

sql-ledger

vulnerability

remote attackers

authentication

code execution

7 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.014 Low

EPSS

Percentile

86.6%

JSON

Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution.

CPENameOperatorVersion
ledgersmb:ledgersmbledgersmbeq1.1.0
ledgersmb:ledgersmbledgersmbeq1.0.0
sql-ledger:sql-ledgersql-ledgerle2.6.24
ledgersmb:ledgersmbledgersmbeq1.1.1