Approved changes feed: RSS · Atom

cpe:2.3:a:frontaccounting:frontaccounting:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorFrontaccounting (b68b6e7c-856b-5dbe-a774-3a1252e0f405)
ProductFrontaccounting (4c9212db-7c13-506d-a18e-765306302a2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/apmuthu/frontaccounting purl2cpe 2026-06-01 10:11:21.650443
pkg:github/frontaccountingerp/fa purl2cpe 2026-06-01 10:11:21.650444
pkg:sourceforge/frontaccounting purl2cpe 2026-06-01 10:11:21.650446

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4045 vulnerable 2026-06-08 04:51:46.713258 Details available
Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in (1) reporting/, (2) sales/, (3) sales/includes/, (4) sales/includes/db/, (5) sales/inquiry/, (6) sales/manage/, (7) sales/view/, (8) taxes/, and (9) taxes/db/.
Published: 2009-11-20T19:00:00.000Z
Updated: 2024-09-16T19:34:58.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4037 vulnerable 2026-06-08 04:51:46.602959 Details available
Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/db/users_db.inc, and various other .inc and .php files under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, and (7) purchasing/.
Published: 2009-11-20T19:00:00.000Z
Updated: 2024-09-16T23:15:21.829Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.