CVE-2007-3907
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.0%
Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to bypass authentication and perform certain actions as an arbitrary user via unspecified vectors involving a URL with a redirect parameter value, along with a callback parameter containing an escaped URL that specifies the action.
Produtos afetados
n/a · n/aReferências
http://secunia.com/advisories/26121https://exchange.xforce.ibmcloud.com/vulnerabilities/35507http://sourceforge.net/project/shownotes.php?release_id=523576&group_id=175965http://www.ledgersmb.org/node/52http://www.securityfocus.com/archive/1/473987/100/0/threadedhttp://www.securityfocus.com/archive/1/473993/100/0/threadedhttp://www.securityfocus.com/bid/24940http://www.vupen.com/english/advisories/2007/2576