SQL Injection Vulnerabilities in FrontAccounting by FrontAccounting

CVE-2009-4037

What is CVE-2009-4037?

Multiple SQL injection vulnerabilities exist in the FrontAccounting application that may allow remote attackers to execute arbitrary SQL commands. These vulnerabilities are present in multiple administrative and application files, including users_db.inc and others found within the admin, dimensions, gl, inventory, manufacturing, and purchasing directories. Proper validation of user input is not enforced, making the system susceptible to malicious SQL queries that could compromise sensitive data and system integrity. Prompt patching of affected versions is essential to mitigate these risks.

References