EUVD-2009-4017

Malware in sbrugna...

EUVD-2020-14018

Malware in sbrugna...

EUVD-2018-2065

Malware in sbrugna...

EUVD-2014-3906

Malware in sbrugna...

EUVD-2019-15294

Malware in sbrugna...

EUVD-2014-1249

Malware in sbrugna...

EUVD-2018-18918

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2011-3740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an err...

CVE-2020-21244

An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/instlang.php...

CVE-2014-3973

Multiple SQL injection vulnerabilities in FrontAccounting FA before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-3740

FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by reporting/includes/fpdi/fpdi2tcpdfbridge.php and certain other files...

CVE-2019-5720

includes/db/class.reflinesdb.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the attacker to grab the entire database of the application via the voidtransaction.php filterType parameter...

CVE-2018-1000890

FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can allow the attacker to grab the entire database of the application...

CVE-2014-125080

A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue...

CVE-2009-4045

Multiple SQL injection vulnerabilities in FrontAccounting FA before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in 1 reporting/, 2 sales/, 3 sales/includes/, 4 sales/includes/db/, 5 sales/inquiry/, 6 sales/manage/, 7...

CVE-2014-125080

A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue...

Path traversal

A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue...

CVE-2014-125080

CVE-2014-125080 affects frontaccounting faplanet and is described as a path traversal vulnerability. The initial and connected documents consistently name unknown code as the vulnerable component and indicate exploitation could lead to unauthorized access to files via path traversal. A patch is i...

CVE-2014-125080 frontaccounting faplanet path traversal

A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue...

frontaccounting 路径遍历漏洞

frontaccounting is a web-based accounting system for enterprise ERP supply chains by Frontaccounting Team. A path traversal vulnerability exists in frontaccounting faplanet, which stems from an unknown issue in the code that results in path traversal...