Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) bank_accounts.php, (2) currencies.php, (3) exchange_rates.php, (4) gl_account_types.php, and (5) gl_accounts.php in gl/manage/; and (6) audit_trail_db.inc, (7) comments_db.inc, (8) inventory_db.inc, (9) manufacturing_db.inc, and (10) references_db.inc in includes/db/.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-11-20T19:00:00Z
Updated: 2024-09-16T17:28:23.073Z
Reserved: 2009-11-20T00:00:00Z
Link: CVE-2009-4046
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2009-11-20T19:30:01.187
Modified: 2009-11-23T05:00:00.000
Link: CVE-2009-4046
Redhat
No data.