CVE-2014-3973

Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Published: Jun 5, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-3973
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
frontaccounting / frontaccounting	2.3.4	2.3.4.x
frontaccounting / frontaccounting	2.3.12	2.3.12.x
frontaccounting / frontaccounting	2.3.11	2.3.11.x
frontaccounting / frontaccounting	2.3.9	2.3.9.x
frontaccounting / frontaccounting	2.3.13	2.3.13.x
frontaccounting / frontaccounting	2.3.14	2.3.14.x
frontaccounting / frontaccounting	2.3.1	2.3.1.x
frontaccounting / frontaccounting	2.3.8	2.3.8.x
frontaccounting / frontaccounting	-	2.3.20.x
frontaccounting / frontaccounting	2.3.7	2.3.7.x
frontaccounting / frontaccounting	2.3-rc	2.3-rc.x
frontaccounting / frontaccounting	2.3-beta	2.3-beta.x
frontaccounting / frontaccounting	2.3.19	2.3.19.x
frontaccounting / frontaccounting	2.3.5	2.3.5.x
frontaccounting / frontaccounting	2.3.18	2.3.18.x
frontaccounting / frontaccounting	2.3-rc1	2.3-rc1.x
frontaccounting / frontaccounting	2.3.2	2.3.2.x
frontaccounting / frontaccounting	2.3.17	2.3.17.x
frontaccounting / frontaccounting	2.3.3	2.3.3.x
frontaccounting / frontaccounting	2.3-rc3	2.3-rc3.x
frontaccounting / frontaccounting	2.3-rc2	2.3-rc2.x
frontaccounting / frontaccounting	2.3.0	2.3.0.x
frontaccounting / frontaccounting	2.3.16	2.3.16.x
frontaccounting / frontaccounting	2.3.15	2.3.15.x
frontaccounting / frontaccounting	2.3.6	2.3.6.x
frontaccounting / frontaccounting	2.3.10	2.3.10.x

Vulnerability Database

CVE-2014-3973