Frontaccounting

Frontaccounting

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2009-4045

  • EPSS 1.06%
  • Veröffentlicht 20.11.2009 19:30:01
  • Zuletzt bearbeitet 16.06.2026 23:12:53

Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in (1) reporting/, (2) sales/, (3) sales/includes/, (4) sal...

7.5

CVE-2009-4046

  • EPSS 1.05%
  • Veröffentlicht 20.11.2009 19:30:01
  • Zuletzt bearbeitet 16.06.2026 23:12:54

Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) bank_accounts.php, (2) currencies.php, (3) exchange_rates.php, (4) gl_accoun...

7.5

CVE-2009-4037

  • EPSS 1.26%
  • Veröffentlicht 20.11.2009 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:12:53

Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/db/users_db.inc, and various other .inc and .php fi...

6.8

CVE-2007-5148

  • EPSS 1.12%
  • Veröffentlicht 01.10.2007 05:17:00
  • Zuletzt bearbeitet 16.06.2026 22:45:32

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/logout.php or certain PHP scripts under (2) admin/, (3) dimensi...

9.3

CVE-2007-5117

Exploit
  • EPSS 3.55%
  • Veröffentlicht 27.09.2007 17:17:00
  • Zuletzt bearbeitet 16.06.2026 22:45:28

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/login.php and (2) includes/l...

7.5

CVE-2007-4279

  • EPSS 75.31%
  • Veröffentlicht 09.08.2007 21:17:00
  • Zuletzt bearbeitet 16.06.2026 22:43:43

PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter.