CVE-2006-4244

CVE-2006-4244 affects SQL-Ledger versions 2.4.4 through 2.6.17, where authentication relies on a cookie value (sql-ledger-[username]) matching the sessionid parameter. An attacker can gain access as any logged-in user by setting the cookie and sessionid to the same value. Connected advisories con...

CVE-2007-1436

CVE-2007-1436 affects LedgerSMB/SQL-Ledger and concerns an authentication bypass in the admin.pl entry point. The vulnerability allows remote attackers to bypass the password check and gain administrative access via unknown vectors. Affected software is LedgerSMB or SQL-Ledger prior to versions 1...