$ cve CVE-2007-1540 JSON

CVE-2007-1540 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 4.9% (pctl 92)

Patch early

A public exploit exists.

Description

Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows remote attackers to run arbitrary executables and bypass authentication via a .. (dot dot) sequence and trailing NULL (%00) in the login parameter. NOTE: this issue was reportedly addressed in SQL-Ledger 2.6.27, however third-party researchers claim that the file is still executed even though an error is generated.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS	4.94% — more likely to be exploited than 92% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-03-20
Last modified	2026-06-16

Affected (2)

Vendor	Product
ledgersmb	ledgersmb
sql-ledger	sql-ledger

Public exploits

Source	Title	Date
exploit-db	LedgerSMB1.0/1.1 / SQL-Ledger 2.6.x - 'Login' Local File Inclusion / Authentication Bypass	2007-03-19

References

→ the Explorer · watch your stack · NVD