Approved changes feed: RSS · Atom

cpe:2.3:a:frontaccounting:frontaccounting:2.2:beta:*:*:*:*:*:*

part: a version: 2.2 update: beta

VendorFrontaccounting (b68b6e7c-856b-5dbe-a774-3a1252e0f405)
ProductFrontaccounting (4c9212db-7c13-506d-a18e-765306302a2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/apmuthu/frontaccounting purl2cpe 2026-06-01 10:11:21.674792
pkg:github/frontaccountingerp/fa purl2cpe 2026-06-01 10:11:21.674794
pkg:sourceforge/frontaccounting purl2cpe 2026-06-01 10:11:21.674795

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4046 vulnerable 2026-06-08 04:51:46.713965 Details available
Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) bank_accounts.php, (2) currencies.php, (3) exchange_rates.php, (4) gl_account_types.php, and (5) gl_accounts.php in gl/manage/; and (6) audit_trail_db.inc, (7) comments_db.inc, (8) inventory_db.inc, (9) manufacturing_db.inc, and (10) references_db.inc in includes/db/.
Published: 2009-11-20T19:00:00.000Z
Updated: 2024-09-16T17:28:23.073Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4037 vulnerable 2026-06-08 04:51:46.613737 Details available
Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/db/users_db.inc, and various other .inc and .php files under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, and (7) purchasing/.
Published: 2009-11-20T19:00:00.000Z
Updated: 2024-09-16T23:15:21.829Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.