info
discussion
exploit
solution
references
SQL-Ledger Redirect Function Arbitrary Code Execution Vulnerability
References:
SQL-Ledger Web Site
(SQL-Ledger)
Arbitrary Code Execution in SQL-Ledger and LedgerSMB through redirects
(chris@metatrontech.com)
Unofficial SQL-Ledger patch for CVE-2007-0667
(Chris Travers)
Privacy Statement
Copyright 2010, SecurityFocus