CVE-2014-3973

FrontAccounting (FA) before 2.3.21 is affected by multiple SQL injection vulnerabilities. The root cause is unspecified vectors allowing remote attackers to execute arbitrary SQL commands, with impact limited to partial confidentiality/integrity/availability per the CVE data. Remediation requires...