CVE-2007-1437

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-13 · updated 2026-06-16

Description

Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution.

Affected products

ledgersmb/ledgersmb: 1.0.0, 1.1.0, 1.1.1
Sql-Ledger: through 2.6.24

References

http://secunia.com/advisories/24363
http://secunia.com/advisories/24366
http://securityreason.com/securityalert/2435
http://www.securityfocus.com/archive/1/461944/100/100/threaded
http://secunia.com/advisories/24363
http://secunia.com/advisories/24366
http://securityreason.com/securityalert/2435
http://www.securityfocus.com/archive/1/461944/100/100/threaded

Get alerted when CVE-2007-1437 or the next vulnerability affects your stack