Frontaccounting Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2009-4045 - Vulnerability Database

Frontaccounting Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2009-4045

High

Reference: CVE-2009-4045

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2009-4045

Title: Frontaccounting Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Overview:

Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in (1) reporting/ (2) sales/ (3) sales/includes/ (4) sales/includes/db/ (5) sales/inquiry/ (6) sales/manage/ (7) sales/view/ (8) taxes/ and (9) taxes/db/.