Description

Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Remediation

References

CVE-2014-3973

Related Vulnerabilities

WordPress Plugin Duplicate Page and Post SQL Injection (2.5.6)

Joomla! Core Local File Inclusion (2.5.0 - 3.8.8)

WordPress Plugin Embed Swagger Cross-Site Scripting (1.0.0)

Internet Information Services Other Vulnerability (CVE-1999-1478)

Apache HTTP Server Other Vulnerability (CVE-2000-0869)

Severity

High

Classification

CVE-2014-3973

Tags

Missing Update Known Vulnerabilities