Lucene search
+L

148 matches found

Vulnrichment
Vulnrichment
added 2026/05/09 6:45 p.m.7 views

CVE-2026-8193 Akaunting Invoice PDF Rendering dompdf.php server-side request forgery

A weakness has been identified in Akaunting 3.1.21. This issue affects some unknown processing of the file config/dompdf.php of the component Invoice PDF Rendering. Executing a manipulation can lead to server-side request forgery. The attack may be launched remotely. The exploit has been made...

6.5CVSS6.2AI score0.00206EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/09 6:45 p.m.10 views

CVE-2026-8193

A weakness has been identified in Akaunting 3.1.21. This issue affects some unknown processing of the file config/dompdf.php of the component Invoice PDF Rendering. Executing a manipulation can lead to server-side request forgery. The attack may be launched remotely. The exploit has been made...

6.5CVSS6.2AI score0.00206EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/05/09 6:45 p.m.52 views

CVE-2026-8193 Akaunting Invoice PDF Rendering dompdf.php server-side request forgery

A weakness has been identified in Akaunting 3.1.21. This issue affects some unknown processing of the file config/dompdf.php of the component Invoice PDF Rendering. Executing a manipulation can lead to server-side request forgery. The attack may be launched remotely. The exploit has been made...

6.5CVSS0.00206EPSS
Exploits0References4
CVE
CVE
added 2026/05/09 6:45 p.m.36 views

CVE-2026-8193

CVE-2026-8193 affects Akaunting 3.1.21, specifically the Invoice PDF Rendering component’s dompdf.php file. The vulnerability arises from unknown processing in that file, enabling a remote attacker to manipulate inputs to achieve server-side request forgery (SSRF). Exploitation is indicated as po...

6.5CVSS6.2AI score0.00206EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/09 12:0 a.m.12 views

Akaunting 代码问题漏洞

Akaunting is an application software developed by Akaunting Company that provides all the tools needed for online fund management. Version 3.1.21 of Akaunting has a code vulnerability; this vulnerability stems from an unknown processing in the Invoice PDF Rendering component’s config/dompdf.php...

6.5CVSS6.6AI score0.00206EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/09 12:0 a.m.19 views

PT-2026-39405

A weakness has been identified in Akaunting 3.1.21. This issue affects some unknown processing of the file config/dompdf.php of the component Invoice PDF Rendering. Executing a manipulation can lead to server-side request forgery. The attack may be launched remotely. The exploit has been made...

6.5CVSS6.2AI score0.00206EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/04/06 5:0 p.m.5 views

CVE-2026-5568

A vulnerability has been found in Akaunting up to 3.1.21. This issue affects some unknown processing of the component Invoice/Billing. The manipulation of the argument notes leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

5.1CVSS4.1AI score0.00253EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/05 3:31 p.m.4 views

EUVD-2026-19083

A vulnerability has been found in Akaunting up to 3.1.21. This issue affects some unknown processing of the component Invoice/Billing. The manipulation of the argument notes leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

5.1CVSS4.1AI score0.00253EPSS
Exploits0References5
NVD
NVD
added 2026/04/05 1:17 p.m.5 views

CVE-2026-5568

A vulnerability has been found in Akaunting up to 3.1.21. This issue affects some unknown processing of the component Invoice/Billing. The manipulation of the argument notes leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

5.1CVSS0.00253EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/05 1:0 p.m.1 views

CVE-2026-5568

A vulnerability has been found in Akaunting up to 3.1.21. This issue affects some unknown processing of the component Invoice/Billing. The manipulation of the argument notes leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

5.1CVSS4.1AI score0.00253EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/05 1:0 p.m.32 views

CVE-2026-5568 Akaunting Invoice/Billing cross site scripting

A vulnerability has been found in Akaunting up to 3.1.21. This issue affects some unknown processing of the component Invoice/Billing. The manipulation of the argument notes leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

5.1CVSS0.00253EPSS
Exploits0References4
CVE
CVE
added 2026/04/05 1:0 p.m.16 views

CVE-2026-5568

CVE-2026-5568 affects Akaunting up to version 3.1.21, specifically the Invoice/Billing processing. The vulnerability arises from the manipulation of the argument notes , enabling a remote cross‑site scripting (XSS) attack. The issue is exploitable remotely and the exploit has been publicly disclo...

5.1CVSS4.1AI score0.00253EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/05 12:0 a.m.11 views

Akaunting 代码注入漏洞

Akaunting is an application software provided by Akaunting Corporation that offers all the tools needed for online fund management. Versions of Akaunting 3.1.21 and earlier had a code injection vulnerability, which was caused by incorrect handling of the parameter “notes” in the Invoice/Billing...

5.1CVSS5.7AI score0.00253EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.9 views

PT-2026-30437

A vulnerability has been found in Akaunting up to 3.1.21. This issue affects some unknown processing of the component Invoice/Billing. The manipulation of the argument notes leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

5.1CVSS4.1AI score0.00253EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/12/12 10:17 p.m.4 views

CVE-2024-58293

Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields. Attackers can inject template payloads in items, taxes, transactions, and vendor name fields to perform arithmetic...

8.6CVSS7.4AI score0.00309EPSS
Exploits0References1
NVD
NVD
added 2025/12/11 10:15 p.m.6 views

CVE-2024-58293

Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields. Attackers can inject template payloads in items, taxes, transactions, and vendor name fields to perform arithmetic...

8.6CVSS0.00309EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/11 9:35 p.m.2 views

CVE-2024-58293 Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields

Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields. Attackers can inject template payloads in items, taxes, transactions, and vendor name fields to perform arithmetic...

8.6CVSS7AI score0.00309EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/11 9:35 p.m.20 views

CVE-2024-58293 Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields

Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields. Attackers can inject template payloads in items, taxes, transactions, and vendor name fields to perform arithmetic...

8.6CVSS0.00309EPSS
Exploits0References4
CVE
CVE
added 2025/12/11 9:35 p.m.12 views

CVE-2024-58293

CVE-2024-58293 affects Akaunting 3.1.8 with a server-side template injection vulnerability. Authenticated administrators can inject template expressions into multiple form fields (items, taxes, transactions, vendor name), enabling arithmetic operations and string manipulations. Public sources in ...

8.6CVSS7AI score0.00309EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.7 views

Akaunting 安全漏洞

Akaunting is an application from Akaunting providing all the tools needed to manage funds online. A security vulnerability exists in Akaunting version 3.1.8 that stems from the presence of server-side template injection in multiple form input fields, which could lead to the execution of template...

8.6CVSS7.2AI score0.00309EPSS
Exploits0References4
Rows per page
Query Builder