CVE-2007-1541

Source
https://cve.org/CVERecord?id=CVE-2007-1541
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2007-1541.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2007-1541
Downstream
Published
2007-03-20T22:19:00Z
Modified
2026-04-10T03:38:44.811652Z
Summary
[none]
Details

Directory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks for the presence of a NULL (%00) character to protect against directory traversal attacks, which allows remote attackers to run arbitrary executables and bypass authentication via a .. (dot dot) sequence in the login parameter.

References

Affected packages