Advisories · Technology
FrontAccounting.
Every CVE that names FrontAccounting among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage
- FrontAccounting
- Weak cryptography or TLS
- CVSS 7.1 High
FrontAccounting through 2.4.20 Cross-Site Request Forgery on Financial Transaction Forms
- FrontAccounting
- Cross-site request forgery (CSRF)
- CVSS 8.7 High
FrontAccounting < 2.4.20 Path Traversal RCE via attachment upload
- FrontAccounting
- Path traversal
- CVSS 7.1 High
FrontAccounting < 2.4.20 SQL Injection via rep601.php
- FrontAccounting
- SQL injection
- Weak cryptography or TLS
- CVSS 7.2 High
FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php
- FrontAccounting
- SQL injection
- CVSS 7.2 High
FrontAccounting < 2.4.20 SQL Injection via get_gl_transactions()
- FrontAccounting
- SQL injection