Unrated severityNVD Advisory· Published Nov 20, 2009· Updated Jun 16, 2026
CVE-2009-4037
CVE-2009-4037
Description
Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/db/users_db.inc, and various other .inc and .php files under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, and (7) purchasing/.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20cpe:2.3:a:frontaccounting:frontaccounting:*:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:frontaccounting:frontaccounting:*:*:*:*:*:*:*:*range: <=2.1.6
- cpe:2.3:a:frontaccounting:frontaccounting:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:beta:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:beta_2:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:rc:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:frontaccounting:frontaccounting:2.2:beta:*:*:*:*:*:*
- (no CPE)range: <2.1.7, 2.2.x < 2.2 RC
Patches
Vulnerability mechanics
References
6- frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.phpnvdPatchVendor Advisory
- frontaccounting.net/wb3/pages/posts/release-2.2-rc104.phpnvdPatchVendor Advisory
- sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/downloadnvdPatch
- sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.2%20RC/frontaccount-2.2RC.tar.gz/downloadnvdPatch
- www.vupen.com/english/advisories/2009/3223nvdPatchVendor Advisory
- secunia.com/advisories/37327nvdVendor Advisory
News mentions
0No linked articles in our index yet.