148 matches found
CVE-2009-4045
CVE-2009-4045 affects FrontAccounting (FA) up to version 2.1.7, with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files (reporting/, sales/, sales/includes/, sales/includes/db/, sales/inqui...
CVE-2009-4045
Multiple SQL injection vulnerabilities in FrontAccounting FA before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in 1 reporting/, 2 sales/, 3 sales/includes/, 4 sales/includes/db/, 5 sales/inquiry/, 6 sales/manage/, 7...
CVE-2009-4046
FrontAccounting 2.2.x is affected by multiple SQL injection vulnerabilities (CVE-2009-4046) in modules under gl/manage/ and includes/db/, allowing remote attackers to execute arbitrary SQL via unspecified parameters to bank_accounts.php, currencies.php, exchange_rates.php, gl_account_types.php, g...
Design/Logic Flaw
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7 purchasing...
CVE-2007-5148
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7 purchasing...
CVE-2007-5148
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7 purchasing...
PT-2007-6241 · Frontaccounting · Frontaccounting
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the path to root parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7...
CVE-2007-5148
FrontAccounting (FA) path_to_root based PHP remote file inclusion is described against FA 1.12 in CVE-2007-5148 and is also echoed in related entries for FA 1.13 (CVE-2007-5117). The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the path_to_root paramet...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.13, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/login.php and 2 includes/lang/language.php, different vectors than CVE-2007-4279...
CVE-2007-5117
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.13, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/login.php and 2 includes/lang/language.php, different vectors than CVE-2007-4279...
CVE-2007-5117
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.13, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/login.php and 2 includes/lang/language.php, different vectors than CVE-2007-4279...
CVE-2007-5117
Summary: CVE-2007-5117 targets FrontAccounting (FA) 1.13 with register_globals enabled, enabling remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/login.php and (2) includes/lang/language.php. The issue is a PHP remote file inclusion (RFI) vulner...
PT-2007-6213 · Frontaccounting · Frontaccounting
Name of the Vulnerable Software and Affected Versions: FrontAccounting version 1.13 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path to root parameter to specific PHP files, such as "access/login.php" and "includes/lang/language.php", when registe...
fa113-rfi.tt
?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...
FrontAccounting 1.13 Remote File Inclusion Vulnerabilities
No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...
FrontAccounting 1.13 - Remote File Inclusion
?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...
FrontAccounting 1.13 Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== FrontAccounting 1.13 Remote File Inclusion Vulnerabilities ========================================================== ?????????? ??????????????? ???????????????????...
FrontAccounting 1.13 - Remote File Inclusion
FrontAccounting 1.13 - Remote File Inclusion ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...
FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability
No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...
Immunity Canvas: FRONTACCOUNT_INCLUDE
Name| frontaccountinclude ---|--- CVE| CVE-2007-4279 Exploit Pack| CANVAS Description| FrontAccounting Remote Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Front Accounting CVE Url: https://vulners.com/cve/CVE-2007-4279 CVE Name: CVE-2007-4279...