Skip to content
OpenAdvisories
Unscored DSA-1239-1 3 CVEs

sql-ledger

Published Dec 17, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 sql-ledger 2.4.7-2sarge1

Vulnerabilities 3

  • Unscored —
    CVE-2006-4244

    SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie mat…

    sql-ledger Debian
  • Unscored —
    CVE-2006-4731 Public exploit

    Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) L…

    sql-ledger Debian
  • Unscored —
    CVE-2006-5872

    login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code …

    sql-ledger Debian