CVE-2018-7176

概要

参考情報

• securitywarrior9.blogspot.in/2018/02/cross-site-request-forgery-front.html · Exploit
• exploit-db.com/exploits/44137 · Exploit

frontaccounting のその他の脆弱性

• CVE-2020-21244中 4.9An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php…
• CVE-2019-5720緊急 9.8includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the …
• CVE-2018-1000890高 7.5FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can all…
• CVE-2014-3973高 7.5Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via un…
• CVE-2011-3740中 5.0FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the install…