CVE

Id
24793  
CVE No.
CVE-2007-1436  
Status
Candidate  
Description
Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to bypass authentication via unknown vectors that prevents a password check from occurring.  
Phase
Assigned (20070313)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
245495 24793 CVE-2007-1436 BUGTRAQ:20070309 Security bypass vulnerability in LedgerSMB and SQL-Ledger (fixes released today)  View
245496 24793 CVE-2007-1436 URL:http://www.securityfocus.com/archive/1/archive/1/462375/100/0/threaded  View
245497 24793 CVE-2007-1436 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=494462&group_id=175965  View
245498 24793 CVE-2007-1436 BID:22889  View
245499 24793 CVE-2007-1436 URL:http://www.securityfocus.com/bid/22889  View
245500 24793 CVE-2007-1436 OSVDB:33622  View
245501 24793 CVE-2007-1436 URL:http://www.osvdb.org/33622  View
245502 24793 CVE-2007-1436 OSVDB:33623  View
245503 24793 CVE-2007-1436 URL:http://www.osvdb.org/33623  View
245504 24793 CVE-2007-1436 SECUNIA:24467  View
245505 24793 CVE-2007-1436 URL:http://secunia.com/advisories/24467  View
245506 24793 CVE-2007-1436 SECUNIA:24496  View
245507 24793 CVE-2007-1436 URL:http://secunia.com/advisories/24496  View
245508 24793 CVE-2007-1436 SREASON:2436  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56551 JVNDB-2007-005243 X-Ice News System の devami.asp における SQL インジェクションの脆弱性 X-Ice News System の devami.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2007-1438 24793 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005243.html  View