GCVE - cpe:2.3:a:ledgersmb:ledgersmb:1.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ledgersmb:ledgersmb:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

Vendor	Ledgersmb (`8dbc1a3d-0208-5ec1-a347-eb1df065b868`)
Product	Ledgersmb (`dab0b395-780a-5bd8-9331-6069f970c970`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/ledgersmb/ledgersmb`	purl2cpe	2026-06-01 10:11:08.616291

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-5372`	vulnerable	2026-06-08 04:50:05.137708	Details available Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field. Published: 2007-10-11T10:00:00.000Z Updated: 2024-08-07T15:31:57.153Z Open on db.gcve.eu Reference links http://secunia.com/advisories/27159 https://exchange.xforce.ibmcloud.com/vulnerabilities/37032 http://www.securityfocus.com/archive/1/481866/100/0/threaded http://osvdb.org/37865 https://exchange.xforce.ibmcloud.com/vulnerabilities/37033	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1437`	vulnerable	2026-06-08 04:49:42.494033	Details available Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution. Published: 2007-03-13T19:00:00.000Z Updated: 2024-08-07T12:59:08.465Z Open on db.gcve.eu Reference links http://secunia.com/advisories/24363 http://securityreason.com/securityalert/2435 http://secunia.com/advisories/24366 http://www.securityfocus.com/archive/1/461944/100/100/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1436`	vulnerable	2026-06-08 04:49:42.474843	Details available Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to bypass authentication via unknown vectors that prevents a password check from occurring. Published: 2007-03-13T19:00:00.000Z Updated: 2024-08-07T12:59:08.319Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/462375/100/0/threaded http://secunia.com/advisories/24496 http://secunia.com/advisories/24467 http://sourceforge.net/project/shownotes.php?release_id=494462&group_id=175965 http://securityreason.com/securityalert/2436	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.