Threats tagged 'ghsa-8ccm-j5hq-9jhr'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.5%	CVE-2026-40523FA · FrontAccounting versions before 2.4.20 have a SQL injection vulnerability in the Audit Trail report handler High8.1EPSS 0.5%2026-06-29GCVE DatabaseCVE-2026-40523 FrontAccounting versions before 2.4.20 have a SQL injection vulnerability in the Audit Trail report handler. Authenticated users with SA_GLANALYTIC permission can inject malicious SQL code via the PARAM_2 and PARAM_3 POST parameters. This vulnerability allows execution of arbitrary SQL queries, enabling data extraction or denial of service through amplified time-based blind SQL injection using SLEEP() functions. EPSS 0.5%Vulnerability CWE-89 #ghsa-8ccm-j5hq-9jhr	GCVE Database	2026-06-29

Page 1 of 1