CVE

Id
24794  
CVE No.
CVE-2007-1437  
Status
Candidate  
Description
Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution.  
Phase
Assigned (20070313)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
245509 24794 CVE-2007-1437 BUGTRAQ:20070305 DoS and code execution issue in LedgerSMB < 1.1.5 and SQL-Ledger < 2.6.25  View
245510 24794 CVE-2007-1437 URL:http://www.securityfocus.com/archive/1/archive/1/461944/100/100/threaded  View
245511 24794 CVE-2007-1437 SECUNIA:24363  View
245512 24794 CVE-2007-1437 URL:http://secunia.com/advisories/24363  View
245513 24794 CVE-2007-1437 SECUNIA:24366  View
245514 24794 CVE-2007-1437 URL:http://secunia.com/advisories/24366  View
245515 24794 CVE-2007-1437 SREASON:2435  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53001 JVNDB-2007-001693 bitesser MySQL Commander の ressourcen/dbopen.php における PHP リモートファイルインクルージョンの脆弱性 bitesser MySQL Commander の ressourcen/dbopen.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-1439 24794 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001693.html  View