PatchTheCVEfrontaccounting vulnerabilities
Recent CVEs affecting frontaccounting products. 4 tracked.
frontaccounting has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-09-30. Highest priority: CVE-2019-5720 (score 63/100).
- CVE-2020-21244 MEDIUM 4.9 DOWNGRADE An issue was discovered in FrontAccounting 2.4.7
- CVE-2019-5720 CRITICAL 9.8 DOWNGRADE includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the refer
- CVE-2018-7176 HIGH 8.8 DOWNGRADE FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php (aka
- CVE-2018-1000890 HIGH 7.5 DOWNGRADE FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in
FAQ
How do I fix frontaccounting vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is frontaccounting being exploited right now?
None of the tracked frontaccounting CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which frontaccounting CVE should I patch first?
CVE-2019-5720 currently ranks highest (63/100): includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the refer.