Description

An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php.

Remediation

References

CVE-2020-21244

Related Vulnerabilities

WordPress Plugin DM Albums 'album.php' Remote File Inclusion (1.9.2)

Ruby Out-of-bounds Write Vulnerability (CVE-2016-2338)

WordPress Plugin EU Cookie Law for GDPR/CCPA Cross-Site Scripting (3.0.6)

Joomla CVE-2012-5827 Vulnerability (CVE-2012-5827)

WordPress Plugin Form Manager Remote Command Execution (1.7.2)

Severity

Medium

Classification

CVE-2020-21244 CWE-22 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities