CVE

Id
27264  
CVE No.
CVE-2007-3907  
Status
Candidate  
Description
Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to bypass authentication and perform certain actions as an arbitrary user via unspecified vectors involving a URL with a redirect parameter value, along with a callback parameter containing an escaped URL that specifies the action.  
Phase
Assigned (20070719)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
280010 27264 CVE-2007-3907 BUGTRAQ:20070718 Clarifications on LedgerSMB vulnerability with Bugtraq ID:24940  View
280011 27264 CVE-2007-3907 URL:http://www.securityfocus.com/archive/1/archive/1/473987/100/0/threaded  View
280012 27264 CVE-2007-3907 BUGTRAQ:20070718 Security Advisory: Login bypass in LedgerSMB 1.2.0 through 1.2.6  View
280013 27264 CVE-2007-3907 URL:http://www.securityfocus.com/archive/1/archive/1/473993/100/0/threaded  View
280014 27264 CVE-2007-3907 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=523576&group_id=175965  View
280015 27264 CVE-2007-3907 CONFIRM:http://www.ledgersmb.org/node/52  View
280016 27264 CVE-2007-3907 BID:24940  View
280017 27264 CVE-2007-3907 URL:http://www.securityfocus.com/bid/24940  View
280018 27264 CVE-2007-3907 VUPEN:ADV-2007-2576  View
280019 27264 CVE-2007-3907 URL:http://www.vupen.com/english/advisories/2007/2576  View
280020 27264 CVE-2007-3907 SECUNIA:26121  View
280021 27264 CVE-2007-3907 URL:http://secunia.com/advisories/26121  View
280022 27264 CVE-2007-3907 XF:ledgersmb-redirection-security-bypass(35507)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53687 JVNDB-2007-002379 Bandersnatch における SQL インジェクションの脆弱性 Bandersnatch には、SQL インジェクションの脆弱性が存在します。 CVE-2007-3909 27264 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002379.html  View