CVE-2006-5589: Ledgersmb

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors in (1) OE.pm, (2) AM.pm, and (3) Form.pm.

Affected products

• Ledgersmb Ledgersmb: up to and including 1.1.0; version 1.0.0 only

Published 2006-10-27. Last modified 2026-06-16.