Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Full Disclosure: Arbitrary Code Execution in LedgerSMB CVE-2006-5872 Jan 27 2007 05:46AM
Chris Travers (chris metatrontech com)
CVE-2006-5872 (filed against SQL-Ledger) also affects LedgerSMB. This
was first fixed in LedgerSMB 1.1.5 but due to a number of unrelated
bugs, we recommend upgrading to 1.1.7. SQL-Ledger fixed the problem in
2.6.21.

This occurs due to the improper handling of input handling in the
redirect f...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus