SQL-Ledger/LedgerSMB Terminal Parameter Directory Traversal Vulnerability

SQL-Ledger/LedgerSMB Terminal Parameter Directory Traversal Vulnerability

Solution:
The vendor has released patches to address this issue. Please see the references for more information.

LedgerSMB LedgerSMB 1.0

LedgerSMB LedgerSMB Version 1.0.0 p1
http://sourceforge.net/project/showfiles.php?group_id=175965

SQL-Ledger SQL-Ledger 2.6.17

SQL-Ledger SQL-Ledger Version 2.6.19
http://www.sql-ledger.org/cgi-bin/nav.pl?page=source/index.html&title= Download

SQL-Ledger SQL-Ledger 2.6.18

SQL-Ledger SQL-Ledger Version 2.6.19
http://www.sql-ledger.org/cgi-bin/nav.pl?page=source/index.html&title= Download