EUVD-2021-23377

Malware in sbrugna...

CVE-2021-36800

Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. A POST sent to /companyid/sales/invoices/invoiceid with an items0price that includes a PHP callable function is executed directly. This issue was fixed in version 2.1.13 of the...

CVE-2021-36800

Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. A POST sent to /companyid/sales/invoices/invoiceid with an items0price that includes a PHP callable function is executed directly. This issue was fixed in version 2.1.13 of the...

Code injection

Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. A POST sent to /companyid/sales/invoices/invoiceid with an items0price that includes a PHP callable function is executed directly. This issue was fixed in version 2.1.13 of the...

CVE-2021-36800

CVE-2021-36800 affects Akaunting v2.1.12 and earlier. A code-injection flaw in Money.php allows a crafted POST to /{company_id}/sales/invoices/{invoice_id} with items[0][price] containing a PHP callable to be executed on the server. Root cause: lack of input sanitization in Money.php, with parseA...

CVE-2021-36800 Akaunting OS Command Injection in 'Money.php'

Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. A POST sent to /companyid/sales/invoices/invoiceid with an items0price that includes a PHP callable function is executed directly. This issue was fixed in version 2.1.13 of the...

Akaunting 代码注入漏洞

Akaunting is an application from Akaunting that provides all the tools needed to manage money online. A code injection vulnerability exists in Akaunting version 2.1.12 and earlier, which stems from the inclusion of a PHP callable function for items0price in the Money.php component of the...

SQL injection vulnerability in SaxueArticle article management system money.php page

SaxueArticle article management system is a php+MySQL for the development of php article management system. A SQL injection vulnerability exists in the money.php page of the SaxueArticle article management system. The vulnerability stems from the program's failure to adequately filter...