CVEvulnerability

CVE-2006-4731

5.0 MEDIUM Published 2006-09-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-09-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ (dot dot slash).

Affected configurations

• dws systems inc. sql-ledger 2.2.0 • dws systems inc. sql-ledger 2.2.1 • dws systems inc. sql-ledger 2.2.2 • dws systems inc. sql-ledger 2.2.3 • dws systems inc. sql-ledger 2.2.4 • dws systems inc. sql-ledger 2.2.5 • dws systems inc. sql-ledger 2.2.6 • dws systems inc. sql-ledger 2.2.7 • dws systems inc. sql-ledger 2.4.0 • dws systems inc. sql-ledger 2.4.1 • dws systems inc. sql-ledger 2.4.2 • dws systems inc. sql-ledger 2.4.3 • dws systems inc. sql-ledger 2.4.4 • dws systems inc. sql-ledger 2.4.5 • dws systems inc. sql-ledger 2.4.6 • dws systems inc. sql-ledger 2.4.7 • dws systems inc. sql-ledger 2.4.8 • dws systems inc. sql-ledger 2.4.9 • dws systems inc. sql-ledger 2.4.10 • dws systems inc. sql-ledger 2.4.11 • dws systems inc. sql-ledger 2.4.12 • dws systems inc. sql-ledger 2.4.13 • dws systems inc. sql-ledger 2.4.14 • dws systems inc. sql-ledger 2.4.15 • dws systems inc. sql-ledger 2.4.16 • dws systems inc. sql-ledger 2.6.1 • dws systems inc. sql-ledger 2.6.2 • dws systems inc. sql-ledger 2.6.3 • dws systems inc. sql-ledger 2.6.4 • dws systems inc. sql-ledger 2.6.5 • dws systems inc. sql-ledger 2.6.6 • dws systems inc. sql-ledger 2.6.7 • dws systems inc. sql-ledger 2.6.8 • dws systems inc. sql-ledger 2.6.9 • dws systems inc. sql-ledger 2.6.10 • dws systems inc. sql-ledger 2.6.11 • dws systems inc. sql-ledger 2.6.12 • dws systems inc. sql-ledger 2.6.13 • dws systems inc. sql-ledger 2.6.14 • dws systems inc. sql-ledger 2.6.15 • dws systems inc. sql-ledger 2.6.16 • dws systems inc. sql-ledger 2.6.17 • dws systems inc. sql-ledger 2.6.18 • ledgersmb ledgersmb (<= 1.0.0)

References