Description
FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can allow the attacker to grab the entire database of the application.
Unscored
CVE-2018-1000890
EUVD-2018-2065GHSA-q6pj-fv68-qfxx
FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can al…
Published Dec 27, 2018 · Updated Sep 16, 2024 · Assigned by mitre