FrontAccounting Multiple Unspecified Security Vulnerabilities
BID:67825
Info
FrontAccounting Multiple Unspecified Security Vulnerabilities
| Bugtraq ID: | 67825 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 21 2014 12:00AM |
| Updated: | May 21 2014 12:00AM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
FrontAccounting FrontAccounting 2.3 RC3 FrontAccounting FrontAccounting 2.3 RC2 FrontAccounting FrontAccounting 2.3 RC |
| Not Vulnerable: | |
Discussion
FrontAccounting CVE-2014-3973 Multiple SQL Injection Vulnerabilities
FrontAccounting is prone to multiple SQL-injection vulnerabilities.
Little is known about these issues or its effects at this time. We will update this BID as more information emerges.
Versions prior to FrontAccounting 2.3.21 are vulnerable.
FrontAccounting is prone to multiple SQL-injection vulnerabilities.
Little is known about these issues or its effects at this time. We will update this BID as more information emerges.
Versions prior to FrontAccounting 2.3.21 are vulnerable.
Exploit / POC
FrontAccounting CVE-2014-3973 Multiple SQL Injection Vulnerabilities
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
FrontAccounting CVE-2014-3973 Multiple SQL Injection Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.