CVEvulnerability

CVE-2007-5372

10.0 HIGH Published 2007-10-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-10-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-89

Description

Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field.

Affected configurations

• dws systems inc. sql-ledger 2.2.0 • dws systems inc. sql-ledger 2.2.1 • dws systems inc. sql-ledger 2.2.2 • dws systems inc. sql-ledger 2.2.3 • dws systems inc. sql-ledger 2.2.4 • dws systems inc. sql-ledger 2.2.5 • dws systems inc. sql-ledger 2.2.6 • dws systems inc. sql-ledger 2.2.7 • dws systems inc. sql-ledger 2.4.0 • dws systems inc. sql-ledger 2.4.1 • dws systems inc. sql-ledger 2.4.2 • dws systems inc. sql-ledger 2.4.3 • dws systems inc. sql-ledger 2.4.4 • dws systems inc. sql-ledger 2.4.5 • dws systems inc. sql-ledger 2.4.6 • dws systems inc. sql-ledger 2.4.7 • dws systems inc. sql-ledger 2.4.8 • dws systems inc. sql-ledger 2.4.9 • dws systems inc. sql-ledger 2.4.10 • dws systems inc. sql-ledger 2.4.11 • dws systems inc. sql-ledger 2.4.12 • dws systems inc. sql-ledger 2.4.13 • dws systems inc. sql-ledger 2.4.14 • dws systems inc. sql-ledger 2.4.15 • dws systems inc. sql-ledger 2.4.16 • dws systems inc. sql-ledger 2.6.1 • dws systems inc. sql-ledger 2.6.2 • dws systems inc. sql-ledger 2.6.3 • dws systems inc. sql-ledger 2.6.4 • dws systems inc. sql-ledger 2.6.5 • dws systems inc. sql-ledger 2.6.6 • dws systems inc. sql-ledger 2.6.7 • dws systems inc. sql-ledger 2.6.8 • dws systems inc. sql-ledger 2.6.9 • dws systems inc. sql-ledger 2.6.10 • dws systems inc. sql-ledger 2.6.11 • dws systems inc. sql-ledger 2.6.12 • dws systems inc. sql-ledger 2.6.13 • dws systems inc. sql-ledger 2.6.14 • dws systems inc. sql-ledger 2.6.15 • dws systems inc. sql-ledger 2.6.16 • dws systems inc. sql-ledger 2.6.17 • dws systems inc. sql-ledger 2.6.18 • dws systems inc. sql-ledger 2.6.27 • ledgersmb ledgersmb 1.0.0 • ledgersmb ledgersmb 1.1.0 • ledgersmb ledgersmb 1.1.1 • ledgersmb ledgersmb 1.1.5 • ledgersmb ledgersmb 1.1.8 • ledgersmb ledgersmb 1.2.0 • ledgersmb ledgersmb 1.2.1 • ledgersmb ledgersmb 1.2.2 • ledgersmb ledgersmb 1.2.3 • ledgersmb ledgersmb 1.2.4 • ledgersmb ledgersmb 1.2.5 • ledgersmb ledgersmb 1.2.6 • ledgersmb ledgersmb 1.2.7

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References