Approved changes feed: RSS · Atom

cpe:2.3:a:frontaccounting:frontaccounting:2.4.6:*:*:*:*:*:*:*

part: a version: 2.4.6 update: *

VendorFrontaccounting (b68b6e7c-856b-5dbe-a774-3a1252e0f405)
ProductFrontaccounting (4c9212db-7c13-506d-a18e-765306302a2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/apmuthu/frontaccounting purl2cpe 2026-06-01 10:11:21.674955
pkg:github/frontaccountingerp/fa purl2cpe 2026-06-01 10:11:21.674956
pkg:sourceforge/frontaccounting purl2cpe 2026-06-01 10:11:21.674958

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5720 vulnerable 2026-06-08 05:14:07.990531 Details available
includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the attacker to grab the entire database of the application via the void_transaction.php filterType parameter.
Published: 2019-01-08T10:00:00.000Z
Updated: 2024-09-17T03:02:37.728Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.