CVE

Id
25280  
CVE No.
CVE-2007-1923  
Status
Candidate  
Description
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests.  
Phase
Assigned (20070410)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252198 25280 CVE-2007-1923 BUGTRAQ:20070406 ACLS ineffective in SQL-Ledger and LedgerSMB  View
252199 25280 CVE-2007-1923 URL:http://www.securityfocus.com/archive/1/archive/1/464880/100/0/threaded  View
252200 25280 CVE-2007-1923 BID:23352  View
252201 25280 CVE-2007-1923 URL:http://www.securityfocus.com/bid/23352  View
252202 25280 CVE-2007-1923 OSVDB:38217  View
252203 25280 CVE-2007-1923 URL:http://osvdb.org/38217  View
252204 25280 CVE-2007-1923 OSVDB:38218  View
252205 25280 CVE-2007-1923 URL:http://osvdb.org/38218  View
252206 25280 CVE-2007-1923 SREASON:2552  View
252207 25280 CVE-2007-1923 URL:http://securityreason.com/securityalert/2552  View
252208 25280 CVE-2007-1923 XF:sqlledger-acl-weak-security(33494)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56679 JVNDB-2007-005371 Tru-Zone Nuke ET の modules/Your_Account/index.php における任意のアカウントを削除される脆弱性 Tru-Zone Nuke ET の modules/Your_Account/index.php の borrado 関数は、アカウント所有者からのアカウント削除リクエストを確認しないため、任意のアカウントを削除される脆弱性が存在します。 CVE-2007-1925 25280 6.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005371.html  View