CVE-2007-1923
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set...
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
Exploit likelihood
What each source reports
NVD Score used
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
- Record
CVE-2007-1923- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
- Record
CVE-2007-1923- Updated
- 2026-11-02
EUVDEUVD-2007-1917 No score
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
- Record
EUVD-2007-1917- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-57fp-3g62-4483 No score
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set...
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests.
- Record
GHSA-57fp-3g62-4483- Updated
- 2026-11-02
OSV No score
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
- Record
CVE-2007-1923- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-1923 No score
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
- Record
DEBIAN-CVE-2007-1923- Updated
- 2026-11-02
OSVUBUNTU-CVE-2007-1923 No score
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
- Record
UBUNTU-CVE-2007-1923- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sql-ledgerDebian:12 |
All versions, plus listed versions 3.2.6-1 |
None known |
sql-ledgerDebian:13 |
All versions, plus listed versions 3.2.6-1 |
None known |
sql-ledgerDebian:14 |
All versions, plus listed versions 3.2.6-1 |
None known |
sql-ledgerUbuntu:16.04:LTS |
All versions, plus listed versions 3.0.8-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1923 is a high vulnerability (CVSS 7.5) in Ledgersmb, published April 10, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.59%, the 85th percentile. No source names a fixed version.