Description
Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
http://frontaccounting.com/wb3/pages/posts/release-2.3.21201.php
Exploit, Patch x_refsource_confirm
http://sourceforge.net/p/frontaccounting/mercurial/ci/7ab9e443a8eb9d1b03cbed33006b7665bda9383e
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/58848
Scores
EPSS
0.0135
EPSS Percentile
68.5%
Details
CWE
CWE-89
Status
published
Products (22)
frontaccounting/frontaccounting
2.3 beta (5 CPE variants)
frontaccounting/frontaccounting
2.3.0
frontaccounting/frontaccounting
2.3.1
frontaccounting/frontaccounting
2.3.2
frontaccounting/frontaccounting
2.3.3
frontaccounting/frontaccounting
2.3.4
frontaccounting/frontaccounting
2.3.5
frontaccounting/frontaccounting
2.3.6
frontaccounting/frontaccounting
2.3.7
frontaccounting/frontaccounting
2.3.8
... and 12 more
Published
Jun 05, 2014
Tracked Since
Feb 18, 2026