• info
• discussion
• exploit
• solution
• references

SQL-Ledger/LedgerSMB Terminal Parameter Directory Traversal Vulnerability

Solution:
The vendor has released patches to address this issue. Please see the references for more information.


LedgerSMB LedgerSMB 1.0

• LedgerSMB LedgerSMB Version 1.0.0 p1
  http://sourceforge.net/project/showfiles.php?group_id=175965

SQL-Ledger SQL-Ledger 2.6.17

• SQL-Ledger SQL-Ledger Version 2.6.19
  http://www.sql-ledger.org/cgi-bin/nav.pl?page=source/index.html&title= Download

SQL-Ledger SQL-Ledger 2.6.18

• SQL-Ledger SQL-Ledger Version 2.6.19
  http://www.sql-ledger.org/cgi-bin/nav.pl?page=source/index.html&title= Download