CVE-2007-4279

Description

References

• arfis.wordpress.com/2007/09/14/rfi-02-frontaccounting
• osvdb.org/36431
• secunia.com/advisories/26350 · Vendor Advisory
• securityfocus.com/bid/25229
• vupen.com/english/advisories/2007/2809
• exchange.xforce.ibmcloud.com/vulnerabilities/35873
• exploit-db.com/exploits/4269

frontaccounting 的其他漏洞

• CVE-2020-21244中危 4.9An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php…
• CVE-2019-5720严重 9.8includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the …
• CVE-2018-1000890高危 7.5FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can all…
• CVE-2018-7176高危 8.8FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php (aka the "add user" feature of the …
• CVE-2014-3973高危 7.5Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via un…