NetSight
IP …
medium5.0Public exploit code

CVE-2006-4731

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote att…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ (dot dot slash).

Affected products

VendorProductAffected versions
Dws Systems Inc.Sql-Ledger
Versions 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5
LedgersmbLedgersmb
through 1.0.0

References