CVE-2006-4731: Dws Systems Inc. SQL-Ledger

Medium severity, CVSS 5.0. EPSS: 6.2% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ (dot dot slash).

Affected products

• Dws Systems Inc. SQL-Ledger: version 2.2.0 only; version 2.2.1 only; version 2.2.2 only; version 2.2.3 only; version 2.2.4 only; version 2.2.5 only; …
• Ledgersmb Ledgersmb: up to and including 1.0.0

Published 2006-09-13. Last modified 2026-06-16.