CVE-2006-5872
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to...
CVE-2006-5872 is a high vulnerability (CVSS 7.5) in Dws Systems Inc. Sql-ledger, published December 17, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.77%, the 78th percentile. Fixed in sql-ledger 2.6.21-1.
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.
Exploit likelihood
What each source reports
NVD Score used
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.
- Record
CVE-2006-5872- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.
- Record
CVE-2006-5872- Updated
- 2026-11-02
EUVDEUVD-2006-5856 No score
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.
- Record
EUVD-2006-5856- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3jwc-qjwv-p4wg No score
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to...
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.
- Record
GHSA-3jwc-qjwv-p4wg- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.
- Record
CVE-2006-5872- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-5872 No score
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.
- Record
DEBIAN-CVE-2006-5872- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sql-ledgerDebian:12 |
before 2.6.21-1 | 2.6.21-1 |
sql-ledgerDebian:13 |
before 2.6.21-1 | 2.6.21-1 |
sql-ledgerDebian:14 |
before 2.6.21-1 | 2.6.21-1 |
sql-ledgerDebian:3.1 |
before 2.4.7-2sarge1, plus listed versions 2.4.7-2 |
2.4.7-2sarge1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |