{"api_version":"1","generated_at":"2026-07-23T19:43:12+00:00","cve":"CVE-2007-5372","urls":{"html":"https://cve.report/CVE-2007-5372","api":"https://cve.report/api/cve/CVE-2007-5372.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-5372","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-5372"},"summary":{"title":"CVE-2007-5372","description":"Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-10-11 10:17:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://securityreason.com/securityalert/3209","name":"http://securityreason.com/securityalert/3209","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - LedgerSMB < 1.2.8, SQL-Ledger 2.x Multiple SQL Injection Issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/37866","name":"http://osvdb.org/37866","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/27159","name":"http://secunia.com/advisories/27159","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"LedgerSMB Multiple SQL Injection Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/37865","name":"http://osvdb.org/37865","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/481866/100/0/threaded","name":"http://www.securityfocus.com/archive/1/481866/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/27171","name":"http://secunia.com/advisories/27171","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SQL-Ledger Multiple SQL Injection Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ledgersmb.org/node/54","name":"http://www.ledgersmb.org/node/54","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"LedgerSMB 1.2.8 Released | LedgerSMB.Org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25979","name":"http://www.securityfocus.com/bid/25979","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"LedgerSMB/SQL-Ledger Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2007/3453","name":"http://www.vupen.com/english/advisories/2007/3453","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37033","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37033","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37032","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37032","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-5372","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5372","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.4.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.27","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dws_systems_inc.","cpe5":"sql-ledger","cpe6":"2.6.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"5372","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ledgersmb","cpe5":"ledgersmb","cpe6":"1.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:31:57.153Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"27159","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27159"},{"name":"ledgersmb-unspecified-sql-injection(37032)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37032"},{"name":"20071009 LedgerSMB < 1.2.8, SQL-Ledger 2.x Multiple SQL Injection Issues","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/481866/100/0/threaded"},{"name":"37865","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/37865"},{"name":"sqlledger-unspecified-sql-injection(37033)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37033"},{"name":"ADV-2007-3453","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/3453"},{"name":"3209","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3209"},{"name":"25979","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25979"},{"name":"37866","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/37866"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.ledgersmb.org/node/54"},{"name":"27171","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27171"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-10-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"27159","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27159"},{"name":"ledgersmb-unspecified-sql-injection(37032)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37032"},{"name":"20071009 LedgerSMB < 1.2.8, SQL-Ledger 2.x Multiple SQL Injection Issues","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/481866/100/0/threaded"},{"name":"37865","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/37865"},{"name":"sqlledger-unspecified-sql-injection(37033)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37033"},{"name":"ADV-2007-3453","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/3453"},{"name":"3209","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3209"},{"name":"25979","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25979"},{"name":"37866","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/37866"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.ledgersmb.org/node/54"},{"name":"27171","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27171"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-5372","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"27159","refsource":"SECUNIA","url":"http://secunia.com/advisories/27159"},{"name":"ledgersmb-unspecified-sql-injection(37032)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37032"},{"name":"20071009 LedgerSMB < 1.2.8, SQL-Ledger 2.x Multiple SQL Injection Issues","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/481866/100/0/threaded"},{"name":"37865","refsource":"OSVDB","url":"http://osvdb.org/37865"},{"name":"sqlledger-unspecified-sql-injection(37033)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37033"},{"name":"ADV-2007-3453","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/3453"},{"name":"3209","refsource":"SREASON","url":"http://securityreason.com/securityalert/3209"},{"name":"25979","refsource":"BID","url":"http://www.securityfocus.com/bid/25979"},{"name":"37866","refsource":"OSVDB","url":"http://osvdb.org/37866"},{"name":"http://www.ledgersmb.org/node/54","refsource":"CONFIRM","url":"http://www.ledgersmb.org/node/54"},{"name":"27171","refsource":"SECUNIA","url":"http://secunia.com/advisories/27171"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-5372","datePublished":"2007-10-11T10:00:00.000Z","dateReserved":"2007-10-10T00:00:00.000Z","dateUpdated":"2024-08-07T15:31:57.153Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-10-11 10:17:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BB9C66B-1984-4947-909B-E3F54DF06909"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3F0D5853-2982-48B7-B269-481C4144E213"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E1353122-B4C2-4153-AD4C-9B6D9CD2B2B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"48CFD8FA-F9E4-48BF-A9BA-9C32153A68BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EE9C0C77-B7F3-4532-8A5C-6DCFEB449F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E83ECB29-1821-4ED3-A9BD-3E4FF4693407"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"54A2DCBE-6D0F-4BE5-8554-31119A33B9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"038721B9-C41E-4F5B-824E-7C0FB45B5C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0BFD4D31-1454-47DC-BFB5-8BE12F81A055"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"D208EAF0-B935-4429-A9B6-E5C442DA00C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EE9A1223-6E76-44C8-A8DF-80A4721DDB07"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"73906EC6-6AED-4E00-B878-E14E145C63C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"8E3142D8-A208-4663-9DE5-E2C850E545DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"9D6E6DF4-7B05-4C37-BF82-E912D768750C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"4A7F2842-997F-4403-8DD0-C5A0D506ADB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"EE971DD9-81A9-49F3-B332-C29643325DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"836E17BD-E968-449C-AB48-9226617DAAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"2C821D81-A9F8-4CA2-8930-603191F88DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"DCC10542-1473-4A25-A0C0-EAA1E8C724D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"51AC444F-F1F4-44E1-892E-9D195D04B082"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"3735244D-DC20-4713-9117-B838E1743A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"40C9F399-BDC3-4635-AFD0-B23C8655327E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"858502CB-8AB6-4FD2-AA98-BB6336CCE1D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"06D0A870-71C4-4E67-9377-EE2B67052DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"1CF31178-1F21-4F04-8BC5-59CE908673D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"034006A3-F6B7-4E41-86E1-FBA11F78BCA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EBC1EF7F-B2EF-459D-A2A1-EFF90B093E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9A763C2E-DBE3-4ECD-9B01-994A8247D60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"7F52FC67-7F9C-47E1-831F-EE8BB81ADAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"1911B88B-2C1B-494C-95B8-47C7FFB6248C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"B08FB320-0E34-40B6-9BFA-DD21F65F99E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"4B9DEAD0-E077-4FC9-9BE6-6CD2F2729BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"6F413591-7937-408E-AD77-67F6BF4E204A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"A419EBB7-F076-412A-B6EC-AE6A551F21FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"0359C86B-003A-446C-B880-575300B53C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"71E696FB-F432-4022-A868-4151B1DF2517"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F272D642-B132-480B-A235-6A990FEF47E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"F710BFC3-F5DE-498C-9669-A87F16ADCA2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"05ADA7EF-DC67-4830-97C7-EFF14FD2F327"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"1D594BCB-7FF8-417D-AC6D-B38881A075E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"EBC86CC6-C3E2-497D-8E81-9B10C97AA008"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"71C41DD4-4E0C-42A1-9D57-D89BEC35A6A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"8D54002D-D37E-4730-A8B9-5164F8426E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"B434E7A6-1924-45B9-ADE2-F237B16F87ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FBCE1BDC-52DF-4555-AB36-3A0AD4DF6EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F92E614-45B3-4744-8CFB-2F4387242B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4E199FF-805A-4473-8E15-B712132E0BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"EEF4DD67-2815-418E-B6C8-F9ABDA1BA6DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"57605020-DF99-4A43-973C-11E86B076360"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BD7ED5DA-88DB-4E0A-A262-B9F3BC48B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D335759B-9C72-4461-976A-35C9A89216A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7E62585F-86AB-4CBF-B79D-14EC51DDDBAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6B0CBE0F-477A-46BC-AE59-F794861DBDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"4EC55F2F-AE95-48EF-8A0E-42472755F16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D1A5301B-B9AE-442F-9792-574B062D3F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"14C4D433-BE8A-47FF-9FDA-36D532E1AAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ledgersmb:ledgersmb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"4B6343E0-EFE0-4B66-9B38-AC42DB32926B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"5372","Ordinal":"1","Title":"CVE-2007-5372","CVE":"CVE-2007-5372","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"5372","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field.","Type":"Description","Title":"CVE-2007-5372"},{"CveYear":"2007","CveId":"5372","Ordinal":"2","NoteData":"2007-10-11","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"5372","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}