Frontaccounting: >> Frontaccounting >> 1.13 Security Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/login.php and (2) includes/lang/language.php, different vectors than CVE-2007-4279.
CVSS Score
9.3
EPSS Score
0.03
Published
2007-09-27