Sql injection

Multiple SQL injection vulnerabilities in index.php in PHPAccounts 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 OutgoingTypeID, 2 OutgoingID, 3 ProjectID, 4 ClientID, 5 InvoiceID, or 6 VendorID parameter...

Directory traversal

Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local files via unspecified manipulations of the page parameter...

CVE-2007-3346

Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local files via unspecified manipulations of the page parameter...

CVE-2007-3345

CVE-2007-3345 : Multiple SQL injection vulnerabilities in the index.php of PHPAccounts 0.5 allow remote attackers to execute arbitrary SQL via the following parameters: Outgoing_Type_ID, Outgoing_ID, Project_ID, Client_ID, Invoice_ID, or Vendor_ID. The NVD metrics assign a base score of 7.5 (HIGH...