• info
• discussion
• exploit
• solution
• references

SQL-Ledger/LedgerSMB Remote Code Execution Vulnerability

SQL-Ledger/LedgerSMB products are prone to vulnerability that lets remote attackers execute arbitrary code.

Remote attackers could exploit this issue to execute arbitrary code in the context of the affected application. This could lead to the compromise of a vulnerable system.

SQL-Ledger versions prior to 2.6.25 and LedgerSMB versions prior to 1.1.5 are vulnerable.