Approved changes feed: RSS · Atom

cpe:2.3:a:frontaccounting:frontaccounting:2.4.5:*:*:*:*:*:*:*

part: a version: 2.4.5 update: *

VendorFrontaccounting (b68b6e7c-856b-5dbe-a774-3a1252e0f405)
ProductFrontaccounting (4c9212db-7c13-506d-a18e-765306302a2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/apmuthu/frontaccounting purl2cpe 2026-06-01 10:11:21.674951
pkg:github/frontaccountingerp/fa purl2cpe 2026-06-01 10:11:21.674952
pkg:sourceforge/frontaccounting purl2cpe 2026-06-01 10:11:21.674954

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000890 vulnerable 2026-06-08 05:10:26.195167 Details available
FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can allow the attacker to grab the entire database of the application.
Published: 2018-12-27T18:00:00.000Z
Updated: 2024-09-16T22:01:32.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.