Description
Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors in (1) OE.pm, (2) AM.pm, and (3) Form.pm.
References
- 22483 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=456803
- ADV-2006-4209 vdb-entry
- 20070405 LedgerSMB 1.2.0 finally released, fixes CVE-2006-5589 mailing-list
- 20749 vdb-entry