CVE-2007-1329

Publicada em 07 mar 2007 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 5.5%

Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . (dot) characters adjacent to (1) users and (2) users/members strings, which are removed by blacklisting functions that filter these strings and collapse into .. (dot dot) sequences.

Produtos afetados

n/a · n/a

Referências

http://osvdb.org/33619 http://osvdb.org/33621 http://secunia.com/advisories/24363 http://secunia.com/advisories/24366 http://securityreason.com/securityalert/2381 http://securitytracker.com/id?1017715 https://exchange.xforce.ibmcloud.com/vulnerabilities/32776 http://www.securityfocus.com/archive/1/461630/100/0/threaded