CVE-2007-0667
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/02/2007
Last modified:
16/10/2018
Description
The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to execute arbitrary code via redirects, related to callbacks, a different issue than CVE-2006-5872.
Impact
Base Score 2.0
6.50
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:* | 1.1.1 (including) | |
cpe:2.3:a:sql-ledger:sql-ledger:2.4.7:*:*:*:*:*:*:* | ||
cpe:2.3:a:sql-ledger:sql-ledger:2.6.17:*:*:*:*:*:*:* | ||
cpe:2.3:a:sql-ledger:sql-ledger:2.6.18:*:*:*:*:*:*:* | ||
cpe:2.3:a:sql-ledger:sql-ledger:2.6.19:*:*:*:*:*:*:* | ||
cpe:2.3:a:sql-ledger:sql-ledger:2.6.21:*:*:*:*:*:*:* | ||
cpe:2.3:a:sql-ledger:sql-ledger:2.6.25:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page