VULNERABILITY INTELLIGENCE

CVE-2006-4731

CVSS score5 MEDIUM
EPSS probability6.20%
CISA KEVNot currently listed
Published2006-09-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ (dot dot slash).

Primary references