Description

PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter.

Remediation

References

CVE-2007-4279

Related Vulnerabilities

Java Unspesificed Vulnerability (CVE-2018-3136)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Multiple Unspecified Vulnerabilities (2.5.7)

IBMHttpServer Observable Discrepancy Vulnerability (CVE-2023-32342)

WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-1208)

WordPress Plugin Opening Hours Cross-Site Scripting (2.3.0)

Severity

High

Classification

CVE-2007-4279

Tags

Missing Update Known Vulnerabilities