Approved changes feed: RSS · Atom

cpe:2.3:a:frontaccounting:frontaccounting:2.0.4:*:*:*:*:*:*:*

part: a version: 2.0.4 update: *

VendorFrontaccounting (b68b6e7c-856b-5dbe-a774-3a1252e0f405)
ProductFrontaccounting (4c9212db-7c13-506d-a18e-765306302a2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/apmuthu/frontaccounting purl2cpe 2026-06-01 10:11:21.655632
pkg:github/frontaccountingerp/fa purl2cpe 2026-06-01 10:11:21.655633
pkg:sourceforge/frontaccounting purl2cpe 2026-06-01 10:11:21.655635

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4045 vulnerable 2026-06-08 04:51:46.713332 Details available
Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in (1) reporting/, (2) sales/, (3) sales/includes/, (4) sales/includes/db/, (5) sales/inquiry/, (6) sales/manage/, (7) sales/view/, (8) taxes/, and (9) taxes/db/.
Published: 2009-11-20T19:00:00.000Z
Updated: 2024-09-16T19:34:58.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4037 vulnerable 2026-06-08 04:51:46.605368 Details available
Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/db/users_db.inc, and various other .inc and .php files under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, and (7) purchasing/.
Published: 2009-11-20T19:00:00.000Z
Updated: 2024-09-16T23:15:21.829Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.