Vulnerabilities > CVE-2007-3907 - Unspecified vulnerability in Ledgersmb

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ledgersmb
NVD
Published: 2007-07-19
Updated: 2024-11-21

Summary

Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to bypass authentication and perform certain actions as an arbitrary user via unspecified vectors involving a URL with a redirect parameter value, along with a callback parameter containing an escaped URL that specifies the action.

Vulnerable Configurations

Part Description Count
Application
Ledgersmb
7

References