CVE-2006-5872

login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script…

published December 18, 2006

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01770 · 78.0th percentile
Published
2006-12-18T00:00Z
EPSS history
Timeline
  • 18 DEC 00:00Z
    login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script…
    cvelistv5