Frontaccounting vulnerabilities

Products

• Frontaccounting 18

Newest

• frontaccounting FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage CVE-2026-80211 8.2 HighAugust 27, 2026
• frontaccounting FrontAccounting through 2.4.20 Cross-Site Request Forgery on Financial Transaction Forms CVE-2026-80210 7.1 HighAugust 27, 2026
• frontaccounting FrontAccounting < 2.4.20 Path Traversal RCE via attachment upload CVE-2026-40521 8.7 HighJune 29, 2026
• frontaccounting FrontAccounting < 2.4.20 SQL Injection via rep601.php CVE-2026-40522 7.1 HighJune 29, 2026
• frontaccounting FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php CVE-2026-40523 7.2 HighJune 29, 2026
• frontaccounting FrontAccounting < 2.4.20 SQL Injection via get_gl_transactions() CVE-2026-40524 7.2 HighJune 29, 2026
• faplanet project faplanet frontaccounting faplanet path traversal CVE-2014-125080 5.5 MediumJanuary 16, 2023
• frontaccounting An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability... CVE-2020-21244 4.9 MediumSeptember 30, 2020
• frontaccounting includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability... CVE-2019-5720 9.8 CriticalJanuary 8, 2019
• frontaccounting FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter ... CVE-2018-1000890 7.5 HighDecember 27, 2018
• frontaccounting FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin... CVE-2018-7176 Public exploit 8.8 HighFebruary 16, 2018
• frontaccounting Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote... CVE-2014-3973 7.5 HighJune 5, 2014
• frontaccounting FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct... CVE-2011-3740 5.0 MediumSeptember 23, 2011
• frontaccounting Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote... CVE-2009-4046 7.5 HighNovember 20, 2009
• frontaccounting Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote... CVE-2009-4045 7.5 HighNovember 20, 2009
• frontaccounting Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2... CVE-2009-4037 7.5 HighNovember 20, 2009
• frontaccounting ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.12... CVE-2007-5148 Disputed 6.8 MediumOctober 1, 2007
• frontaccounting Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when... CVE-2007-5117 Public exploit 9.3 HighSeptember 27, 2007
• frontaccounting PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows... CVE-2007-4279 Public exploit EPSS 75.3% 7.5 HighAugust 9, 2007