• info
• discussion
• exploit
• solution
• references

SQL-Ledger Redirect Function Arbitrary Code Execution Vulnerability

SQL-Ledger is prone to an arbitrary code-execution vulnerability.

An attacker could exploit this issue to execute arbitrary code in the context of the affected application. This could lead to the compromise of a vulnerable system.

SQL-Ledger 2.6 and prior versions are vulnerable.