Description
Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to bypass authentication and perform certain actions as an arbitrary user via unspecified vectors involving a URL with a redirect parameter value, along with a callback parameter containing an escaped URL that specifies the action.
References
- 20070718 Security Advisory: Login bypass in LedgerSMB 1.2.0 through 1.2.6 mailing-list
- http://sourceforge.net/project/shownotes.php?release_id=523576&group_id=175965
- 26121 third-party-advisory
- ADV-2007-2576 vdb-entry
- 20070718 Clarifications on LedgerSMB vulnerability with Bugtraq ID:24940 mailing-list
- http://www.ledgersmb.org/node/52
- ledgersmb-redirection-security-bypass(35507) vdb-entry
- 24940 vdb-entry