CVE-2007-1329
EPSS 9.0%
Description
Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . (dot) characters adjacent to (1) users and (2) users/members strings, which are removed by blacklisting functions that filter these strings and collapse into .. (dot dot) sequences.
How to fix CVE-2007-1329
No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.
- Debian/sql-ledger—no fix listed
Is CVE-2007-1329 being exploited?
Moderate — EPSS is 9.0%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0