Design/Logic Flaw

2023-10-3105:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

remote attacker

arbitrary code

validation

controllers

nvd

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON

An issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via the validation.php, and controllers/front/validation.php components.

CPENameOperatorVersion
franfinancelt2.0.27
franfinancelt1.9.0

CPE	Name	Operator	Version
	franfinance	lt	2.0.27
	franfinance	lt	1.9.0

References

security.friendsofpresta.org/modules/2023/10/25/franfinance.html