• info
• discussion
• exploit
• solution
• references

SQL-Ledger Unspecified Code Execution Vulnerability

Solution:
The vendor has released updates to address this issue.

Please see the referenced advisories for more information.


LedgerSMB LedgerSMB 1.0

• LedgerSMB ledger-smb-1.1.7.tar.gz
  http://downloads.sourceforge.net/ledger-smb/ledger-smb-1.1.7.tar.gz

LedgerSMB LedgerSMB 1.0 p1

• LedgerSMB ledger-smb-1.1.7.tar.gz
  http://downloads.sourceforge.net/ledger-smb/ledger-smb-1.1.7.tar.gz

LedgerSMB LedgerSMB 1.1

• LedgerSMB ledger-smb-1.1.7.tar.gz
  http://downloads.sourceforge.net/ledger-smb/ledger-smb-1.1.7.tar.gz

LedgerSMB LedgerSMB 1.1

• LedgerSMB ledger-smb-1.1.7.tar.gz
  http://downloads.sourceforge.net/ledger-smb/ledger-smb-1.1.7.tar.gz

SQL-Ledger SQL-Ledger 2.6.17

• SQL-Ledger sql-ledger-2.6.23.tar.gz
  http://prdownloads.sourceforge.net/sql-ledger/sql-ledger-2.6.23.tar.gz

SQL-Ledger SQL-Ledger 2.6.18

• SQL-Ledger sql-ledger-2.6.23.tar.gz
  http://prdownloads.sourceforge.net/sql-ledger/sql-ledger-2.6.23.tar.gz

SQL-Ledger SQL-Ledger 2.6.19

• SQL-Ledger sql-ledger-2.6.23.tar.gz
  http://prdownloads.sourceforge.net/sql-ledger/sql-ledger-2.6.23.tar.gz