CVE-2009-4045

Опубликовано: 20 нояб. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in (1) reporting/, (2) sales/, (3) sales/includes/, (4) sales/includes/db/, (5) sales/inquiry/, (6) sales/manage/, (7) sales/view/, (8) taxes/, and (9) taxes/db/.

Ссылки

http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php
Patch
http://secunia.com/advisories/37327
Vendor Advisory
http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/download
Patch
http://www.vupen.com/english/advisories/2009/3223
Vendor Advisory
http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php
Patch
http://secunia.com/advisories/37327
Vendor Advisory
http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/download
Patch
http://www.vupen.com/english/advisories/2009/3223
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:frontaccounting:frontaccounting:*:*:*:*:*:*:*:*

Версия до 2.1.6 (включая)

cpe:2.3:a:frontaccounting:frontaccounting:2.0:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.1:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:beta:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:beta_2:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:rc:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.1.4:*:*:*:*:*:*:*

cpe:2.3:a:frontaccounting:frontaccounting:2.1.5:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00397

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-g7gp-8rqr-gjrh

github

почти 4 года назад