Frontaccounting Schwachstellen

Version

2.3.1	4
2.0	4
2.0.1	4
2.0.2	4
2.0.3	4

Massnahmen

Official Fix	6
Temporary Fix	0
Workaround	0
Unavailable	2
Not Defined	4

Ausnutzbarkeit

High	0
Functional	0
Proof-of-Concept	6
Unproven	0
Not Defined	6

Zugriffsart

Not Defined	0
Physical	0
Local	2
Adjacent	0
Network	10

Authentisierung

Not Defined	0
High	0
Low	2
None	10

Benutzeraktivität

Not Defined	0
Required	0
None	12

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	0
≤8	8
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	8
≤8	0
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	0
≤8	8
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Hersteller

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	2
<2k	0
<5k	10
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit heute

<1k	12
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (42): 1.12, 1.12 Build 31, 1.13, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.2, 2.3, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.7, 2.3.8, 2.3.9, 2.3.11, 2.3.12, 2.3.13, 2.3.14, 2.3.15, 2.3.16, 2.3.17, 2.3.18, 2.3.19, 2.4.3, 2.4.5, 2.4.6, 2.4.7

Softwaretyp: Accounting Software

Veröffentlicht	Base	Temp	Schwachstelle	0day	Heute	Aus	Mas	CTI	CVE
30.09.2020	5.1	5.1	FrontAccounting inst_lang.php Directory Traversal	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-21244
08.01.2019	8.5	8.5	FrontAccounting class.reflines_db.inc SQL Injection	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-5720
28.12.2018	7.4	6.7	FrontAccounting attachments.php Time-Based SQL Injection	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2018-1000890
16.02.2018	6.5	6.2	FrontAccounting users.php Cross Site Request Forgery	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.03	CVE-2018-7176
05.06.2014	7.3	7.0	FrontAccounting SQL Injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-3973
23.09.2011	5.3	5.3	FrontAccounting Error Message Information Disclosure	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2011-3740
20.11.2009	7.3	6.6	FrontAccounting bank_accounts.php SQL Injection	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2009-4046
20.11.2009	7.3	6.6	FrontAccounting SQL Injection	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2009-4045
20.11.2009	7.3	6.6	FrontAccounting Purchasing SQL Injection	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2009-4037
27.09.2007	9.8	9.0	FrontAccounting erweiterte Rechte	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.00	CVE-2007-5117