Directory Traversal in SQL-Ledger by SQL-Ledger

CVE-2007-1541

What is CVE-2007-1541?

A directory traversal vulnerability exists in the login script of SQL-Ledger 2.6.27. The script inadequately validates user input, specifically failing to properly handle NULL characters, which could allow a remote attacker to bypass authentication mechanisms and execute arbitrary code on the server. By exploiting this flaw with a crafted request that includes a '..' (dot dot) sequence in the login parameter, an attacker may gain unauthorized access to the system, potentially leading to further compromises.

References