Vulners
Lucene search
3 matches found
CVE-2026-40524
FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the getgltransactions function where the filtertype parameter is concatenated directly into a SQL IN clause without parameterization. Attackers with SAGLANALYTIC permission can inject arbitrary SQL by supplying a closing...
8.1CVSS
Exploits0References4
CVE-2026-40523
CVE-2026-40523 affects FrontAccounting
8.1CVSS6.1AI score
Exploits0References4
EUVD-2026-40079
FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the getgltransactions function where the filtertype parameter is concatenated directly into a SQL IN clause without parameterization. Attackers with SAGLANALYTIC permission can inject arbitrary SQL by supplying a closing...
8.1CVSS6AI score
Exploits0References4
20