Frontaccounting Sårbarheter

Version

2.2	4
2.0	4
2.0.1	4
2.0.2	4
2.0.3	4

Åtgärd

Official Fix	8
Temporary Fix	0
Workaround	0
Unavailable	2
Not Defined	2

Utnyttjbarhet

High	0
Functional	0
Proof-of-Concept	8
Unproven	0
Not Defined	4

Åtkomstvektor

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	12

Autentisering

Not Defined	0
High	0
Low	0
None	12

Användarinteraktion

Not Defined	0
Required	0
None	12

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	8
≤9	0
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	8
≤8	0
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	8
≤9	0
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	0
<2k	2
<5k	10
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Utnyttja idag

<1k	12
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (42): 1.12, 1.12 Build 31, 1.13, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.2, 2.3, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.7, 2.3.8, 2.3.9, 2.3.11, 2.3.12, 2.3.13, 2.3.14, 2.3.15, 2.3.16, 2.3.17, 2.3.18, 2.3.19, 2.4.3, 2.4.5, 2.4.6, 2.4.7

Programvarutyp: Accounting Software

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
30/09/2020	5.1	5.1	FrontAccounting inst_lang.php kataloggenomgång	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-21244
08/01/2019	8.5	8.5	FrontAccounting class.reflines_db.inc sql injektion	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2019-5720
28/12/2018	7.4	6.7	FrontAccounting attachments.php Time-Based sql injektion	$0-$5k	Beräknande	Proof-of-Concept	Not Defined	0.00	CVE-2018-1000890
16/02/2018	6.5	6.2	FrontAccounting users.php förfalskning på begäran över webbplatsen	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2018-7176
05/06/2014	7.3	7.0	FrontAccounting sql injektion	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-3973
23/09/2011	5.3	5.3	FrontAccounting Error Message informationsgivning	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2011-3740
20/11/2009	7.3	6.6	FrontAccounting bank_accounts.php sql injektion	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2009-4046
20/11/2009	7.3	6.6	FrontAccounting sql injektion	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2009-4045
20/11/2009	7.3	6.6	FrontAccounting Purchasing sql injektion	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2009-4037
27/09/2007	9.8	9.0	FrontAccounting privilegier eskalering	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.00	CVE-2007-5117