← Database

CVE-2007-5372

CRITICAL CVSS: 10.0 Published: 2007-10-11 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field.

Affected Platforms

Ledgersmb LedgersmbDws Systems Inc. Sql-Ledger

Weakness Type

CWE-89

References