Description

An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php.

Remediation

References

CVE-2020-21244

Related Vulnerabilities

WordPress Plugin About Author Box Cross-Site Scripting (1.0.1)

WordPress Plugin Peugeot Music Arbitrary File Upload (1.0)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Vulnerabilities (1.3.88)

Oracle Application Server Other Vulnerability (CVE-2002-0659)

Joomla! Core 1.7.x Information Disclosure (1.7.0 - 1.7.4)

Severity

Medium

Classification

CVE-2020-21244 CWE-22 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities