HIGH🇬🇧 English

CVE-2007-1436

CVSS 7.5v2.0pub. 2007-03-13upd. 2026-04-23

Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to bypass authentication via unknown vectors that prevents a password check from occurring.

oryginał EN
CVSS Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Ledgersmb

    APP
    Ledgersmb
    1.0.01.1.01.1.11.1.5≤ 1.1.8

  • Sql Ledger

    APP
    Sql-Ledger
    2.4.102.4.112.4.122.4.132.4.142.4.152.4.162.4.42.4.52.4.62.4.72.4.82.4.92.6.02.6.1+ 20 więcej
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2018-9246CRITICAL9.8ten sam produkt

The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently...

CVE-2024-23831HIGH7.5ten sam produkt

LedgerSMB is a free web-based double-entry accounting system. When a LedgerSMB database administrator has an a...

CVE-2021-3693HIGH8.8ten sam produkt

LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially cr...

CVE-2021-3694HIGH8.2ten sam produkt

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted...

CVE-2009-4402HIGH7.5ten sam produkt

The default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified administrative o...