CVE-2007-1923 | BDVDB-2026-23387 Detail
Description#
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://osvdb.org/38218
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33494
- http://securityreason.com/securityalert/2552
- http://osvdb.org/38217
- http://www.securityfocus.com/bid/23352
- http://www.securityfocus.com/archive/1/464880/100/0/threaded
- https://github.com/ledgersmb/LedgerSMB/blob/master/Changelog
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.