İçeriğe atla
Noroxi

FrontAccounting kayıtları

frontaccounting üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

12 kayıt
  • CVE-2007-4279
    53Planlayın

    PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code

    YüksekCVSS 7,5Kavram kanıtıEPSS %75

    frontaccounting · frontaccounting9 Ağu 2007

  • CVE-2019-5720
    39İzleyin

    includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the

    KritikCVSS 9,8İstismar yokEPSS %1

    frontaccounting · frontaccounting8 Oca 2019

  • CVE-2007-5117
    38İzleyin

    Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allow remote attackers to

    KritikCVSS 9,3Kavram kanıtıEPSS %3

    frontaccounting · frontaccounting27 Eyl 2007

  • CVE-2018-7176
    36İzleyin

    FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php (aka the "add user" feature of the

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    frontaccounting · frontaccounting16 Şub 2018

  • CVE-2018-1000890
    31İzleyin

    FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can all

    YüksekCVSS 7,5İstismar yokEPSS %1

    frontaccounting · frontaccounting28 Ara 2018

  • CVE-2014-3973
    30İzleyin

    Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via un

    YüksekCVSS 7,5İstismar yokEPSS %1

    frontaccounting · frontaccounting5 Haz 2014

  • CVE-2009-4037
    30İzleyin

    Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbi

    YüksekCVSS 7,5İstismar yokEPSS %1

    frontaccounting · frontaccounting20 Kas 2009

  • CVE-2009-4045
    30İzleyin

    Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary SQL commands via uns

    YüksekCVSS 7,5İstismar yokEPSS %1

    frontaccounting · frontaccounting20 Kas 2009

  • CVE-2009-4046
    30İzleyin

    Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute arbitrary SQL commands

    YüksekCVSS 7,5İstismar yokEPSS %1

    frontaccounting · frontaccounting20 Kas 2009

  • CVE-2007-5148
    27İzleyin

    Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.12 allow remote attackers to execute arbitrary PHP code via a U

    OrtaCVSS 6,8İstismar yokEPSS %1

    frontaccounting · frontaccounting1 Eki 2007

  • CVE-2011-3740
    20İzleyin

    FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the install

    OrtaCVSS 5,0İstismar yokEPSS %1

    frontaccounting · frontaccounting23 Eyl 2011

  • CVE-2020-21244
    19İzleyin

    An issue was discovered in FrontAccounting 2.4.7.

    OrtaCVSS 4,9İstismar yokEPSS %1

    frontaccounting · frontaccounting30 Eyl 2020