2 matches found
CVE-2026-40522
FrontAccounting
7.1CVSS6AI score0.00148EPSS
SaveExploits0References4
CVE-2026-40522 FrontAccounting < 2.4.20 SQL Injection via rep601.php
FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Bank Statement report handler that allows authenticated attackers to extract arbitrary database data by injecting UNION SELECT payloads into the PARAM0 POST parameter. Attackers can supply malicious SQL syntax through the...
7.1CVSS0.00148EPSS
SaveExploits0References4
20