SQL-Ledger/LedgerSMB Template Editing File Parameter Directory Traversal Vulnerability

SQL-Ledger/LedgerSMB Template Editing File Parameter Directory Traversal Vulnerability

References:

Directory Transversal and Arbitrary Code Execution Vulnerability in SQL-Ledger (Chris Travers)
LedgerSMB Website (LedgerSMB)
SQL-Ledger Web Site (SQL-Ledger)

Privacy Statement
Copyright 2010, SecurityFocus