CVE-2014-3973

Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
frontaccountingfrontaccounting
𝑥
≤ 2.3.20
frontaccountingfrontaccounting
2.3:beta
frontaccountingfrontaccounting
2.3:rc
frontaccountingfrontaccounting
2.3:rc1
frontaccountingfrontaccounting
2.3:rc2
frontaccountingfrontaccounting
2.3:rc3
frontaccountingfrontaccounting
2.3.0
frontaccountingfrontaccounting
2.3.1
frontaccountingfrontaccounting
2.3.2
frontaccountingfrontaccounting
2.3.3
frontaccountingfrontaccounting
2.3.4
frontaccountingfrontaccounting
2.3.5
frontaccountingfrontaccounting
2.3.6
frontaccountingfrontaccounting
2.3.7
frontaccountingfrontaccounting
2.3.8
frontaccountingfrontaccounting
2.3.9
frontaccountingfrontaccounting
2.3.10
frontaccountingfrontaccounting
2.3.11
frontaccountingfrontaccounting
2.3.12
frontaccountingfrontaccounting
2.3.13
frontaccountingfrontaccounting
2.3.14
frontaccountingfrontaccounting
2.3.15
frontaccountingfrontaccounting
2.3.16
frontaccountingfrontaccounting
2.3.17
frontaccountingfrontaccounting
2.3.18
frontaccountingfrontaccounting
2.3.19
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://frontaccounting.com/wb3/pages/posts/release-2.3.21201.php
http://secunia.com/advisories/58848
http://sourceforge.net/p/frontaccounting/mercurial/ci/7ab9e443a8eb9d1b03cbed33006b7665bda9383e
http://frontaccounting.com/wb3/pages/posts/release-2.3.21201.php
http://secunia.com/advisories/58848
http://sourceforge.net/p/frontaccounting/mercurial/ci/7ab9e443a8eb9d1b03cbed33006b7665bda9383e