GCVE - cpe:2.3:a:ledgersmb:ledgersmb:1.0.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ledgersmb:ledgersmb:1.0.0:*:*:*:*:*:*:*

part: a version: 1.0.0 update: *

Vendor	Ledgersmb (`8dbc1a3d-0208-5ec1-a347-eb1df065b868`)
Product	Ledgersmb (`dab0b395-780a-5bd8-9331-6069f970c970`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/ledgersmb/ledgersmb`	purl2cpe	2026-06-01 10:11:08.613836

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-5372`	vulnerable	2026-06-08 04:50:05.136702	Details available Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field. Published: 2007-10-11T10:00:00.000Z Updated: 2024-08-07T15:31:57.153Z Open on db.gcve.eu Reference links http://secunia.com/advisories/27159 https://exchange.xforce.ibmcloud.com/vulnerabilities/37032 http://www.securityfocus.com/archive/1/481866/100/0/threaded http://osvdb.org/37865 https://exchange.xforce.ibmcloud.com/vulnerabilities/37033	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1437`	vulnerable	2026-06-08 04:49:42.493990	Details available Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution. Published: 2007-03-13T19:00:00.000Z Updated: 2024-08-07T12:59:08.465Z Open on db.gcve.eu Reference links http://secunia.com/advisories/24363 http://securityreason.com/securityalert/2435 http://secunia.com/advisories/24366 http://www.securityfocus.com/archive/1/461944/100/100/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1436`	vulnerable	2026-06-08 04:49:42.473556	Details available Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to bypass authentication via unknown vectors that prevents a password check from occurring. Published: 2007-03-13T19:00:00.000Z Updated: 2024-08-07T12:59:08.319Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/462375/100/0/threaded http://secunia.com/advisories/24496 http://secunia.com/advisories/24467 http://sourceforge.net/project/shownotes.php?release_id=494462&group_id=175965 http://securityreason.com/securityalert/2436	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5589`	vulnerable	2026-06-08 04:49:20.845622	Details available Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors in (1) OE.pm, (2) AM.pm, and (3) Form.pm. Published: 2006-10-27T18:00:00.000Z Updated: 2024-08-07T19:55:53.569Z Open on db.gcve.eu Reference links http://secunia.com/advisories/22483 http://sourceforge.net/project/shownotes.php?release_id=456803 http://www.vupen.com/english/advisories/2006/4209 http://www.securityfocus.com/archive/1/464789/100/200/threaded http://www.securityfocus.com/bid/20749	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.