The vulnerability of the Money.php component of the accounting software Akaunting allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Money.php component of the accounting software Akaunting is related to improper code generation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2021-36800

Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. A POST sent to /companyid/sales/invoices/invoiceid with an items0price that includes a PHP callable function is executed directly. This issue was fixed in version 2.1.13 of the...