LedgerSMB versions 1.0.0 through 1.2.7 and SQL-Ledger version 2.x are susceptible to SQL injection vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/59956/ledgersmb-sql.txt
Source: https://packetstormsecurity.com/files/59956/ledgersmb-sql.txt.html