Lucene search
+L

148 matches found

CVE
CVE
added 2009/11/20 7:00 p.m.65 views

CVE-2009-4045

CVE-2009-4045 affects FrontAccounting (FA) up to version 2.1.7, with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files (reporting/, sales/, sales/includes/, sales/includes/db/, sales/inqui...

7.5CVSS8.6AI score0.01063EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2009/11/20 7:00 p.m.38 views

CVE-2009-4045

Multiple SQL injection vulnerabilities in FrontAccounting FA before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in 1 reporting/, 2 sales/, 3 sales/includes/, 4 sales/includes/db/, 5 sales/inquiry/, 6 sales/manage/, 7...

8.6AI score0.01063EPSS
SaveExploits0References4
CVE
CVE
added 2009/11/20 7:00 p.m.59 views

CVE-2009-4046

FrontAccounting 2.2.x is affected by multiple SQL injection vulnerabilities (CVE-2009-4046) in modules under gl/manage/ and includes/db/, allowing remote attackers to execute arbitrary SQL via unspecified parameters to bank_accounts.php, currencies.php, exchange_rates.php, gl_account_types.php, g...

7.5CVSS8.6AI score0.01051EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2007/10/01 5:17 a.m.19 views

Design/Logic Flaw

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7 purchasing...

6.8CVSS7.6AI score0.75307EPSS
SaveExploits4References2Affected Software1
NVD
NVD
added 2007/10/01 5:17 a.m.20 views

CVE-2007-5148

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7 purchasing...

6.8CVSS7.3AI score0.01115EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2007/10/01 12:00 a.m.32 views

CVE-2007-5148

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7 purchasing...

7.3AI score0.01115EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2007/10/01 12:00 a.m.11 views

PT-2007-6241 · Frontaccounting · Frontaccounting

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the path to root parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7...

9.3CVSS7.9AI score0.75307EPSS
SaveExploits4References4
CVE
CVE
added 2007/10/01 12:00 a.m.63 views

CVE-2007-5148

FrontAccounting (FA) path_to_root based PHP remote file inclusion is described against FA 1.12 in CVE-2007-5148 and is also echoed in related entries for FA 1.13 (CVE-2007-5117). The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the path_to_root paramet...

6.8CVSS7.3AI score0.01115EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2007/09/27 5:17 p.m.27 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.13, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/login.php and 2 includes/lang/language.php, different vectors than CVE-2007-4279...

9.3CVSS7.8AI score0.75307EPSS
SaveExploits4References5Affected Software1
NVD
NVD
added 2007/09/27 5:17 p.m.32 views

CVE-2007-5117

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.13, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/login.php and 2 includes/lang/language.php, different vectors than CVE-2007-4279...

9.3CVSS7.4AI score0.03551EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2007/09/27 5:00 p.m.38 views

CVE-2007-5117

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.13, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/login.php and 2 includes/lang/language.php, different vectors than CVE-2007-4279...

7.4AI score0.03551EPSS
SaveExploits2References5
CVE
CVE
added 2007/09/27 5:00 p.m.63 views

CVE-2007-5117

Summary: CVE-2007-5117 targets FrontAccounting (FA) 1.13 with register_globals enabled, enabling remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/login.php and (2) includes/lang/language.php. The issue is a PHP remote file inclusion (RFI) vulner...

9.3CVSS7.4AI score0.03551EPSS
SaveExploits2References5Affected Software1
Positive Technologies
Positive Technologies
added 2007/09/27 12:00 a.m.12 views

PT-2007-6213 · Frontaccounting · Frontaccounting

Name of the Vulnerable Software and Affected Versions: FrontAccounting version 1.13 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path to root parameter to specific PHP files, such as "access/login.php" and "includes/lang/language.php", when registe...

9.3CVSS7.9AI score0.03551EPSS
SaveExploits2References7
Packet Storm
Packet Storm
added 2007/09/27 12:00 a.m.18 views

fa113-rfi.tt

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2007/09/26 12:00 a.m.30 views

FrontAccounting 1.13 Remote File Inclusion Vulnerabilities

No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/09/26 12:00 a.m.44 views

FrontAccounting 1.13 - Remote File Inclusion

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...

9.3CVSS5.8AI score0.03551EPSS
SaveExploits2
zdt
zdt
added 2007/09/26 12:00 a.m.25 views

FrontAccounting 1.13 Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== FrontAccounting 1.13 Remote File Inclusion Vulnerabilities ========================================================== ?????????? ??????????????? ???????????????????...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/09/26 12:00 a.m.16 views

FrontAccounting 1.13 - Remote File Inclusion

FrontAccounting 1.13 - Remote File Inclusion ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

0.5AI score
SaveExploits0
seebug.org
seebug.org
added 2007/08/16 12:00 a.m.27 views

FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability

No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

7.1AI score
SaveExploits0
canvas
canvas
added 2007/08/09 9:17 p.m.56 views

Immunity Canvas: FRONTACCOUNT_INCLUDE

Name| frontaccountinclude ---|--- CVE| CVE-2007-4279 Exploit Pack| CANVAS Description| FrontAccounting Remote Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Front Accounting CVE Url: https://vulners.com/cve/CVE-2007-4279 CVE Name: CVE-2007-4279...

7.5CVSS6.5AI score0.75307EPSS
SaveExploits2
Rows per page
Query Builder