Skip to content
OpenAdvisories

Vendor

FrontAccounting

7 known vulnerabilities.

Products

FrontAccounting 6 faplanet 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-80211

    FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage

    FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5($_POST['password']) to add_user() and update_user_password(), admin/change_current_user_password.php does the same when a user changes their …

    FrontAccounting FrontAccounting
  • Medium 6.5
    CVE-2026-80210

    FrontAccounting through 2.4.20 Cross-Site Request Forgery on Financial Transaction Forms

    FrontAccounting through 2.4.20 generates a CSRF token in end_form() in includes/ui/ui_controls.inc and embeds it as the _token hidden field in every form it renders, but only admin/users.php and admin/change_current_user_password.php call check_csrf_token() t…

    FrontAccounting FrontAccounting
  • Medium 5.5
    CVE-2014-125080

    frontaccounting faplanet path traversal

    A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to…

    FrontAccounting faplanet