Approved changes feed: RSS · Atom

cpe:2.3:a:frontaccounting:frontaccounting:1.13:*:*:*:*:*:*:*

part: a version: 1.13 update: *

VendorFrontaccounting (b68b6e7c-856b-5dbe-a774-3a1252e0f405)
ProductFrontaccounting (4c9212db-7c13-506d-a18e-765306302a2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/apmuthu/frontaccounting purl2cpe 2026-06-01 10:11:21.649196
pkg:github/frontaccountingerp/fa purl2cpe 2026-06-01 10:11:21.649197
pkg:sourceforge/frontaccounting purl2cpe 2026-06-01 10:11:21.649199

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5117 vulnerable 2026-06-08 04:49:57.918453 Details available
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/login.php and (2) includes/lang/language.php, different vectors than CVE-2007-4279.
Published: 2007-09-27T17:00:00.000Z
Updated: 2024-08-07T15:17:28.293Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.