Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/login.php and (2) includes/lang/language.php, different vectors than CVE-2007-4279.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FrontAccounting'access/login.php和includes/lang/language.php'输入验证漏洞
Vulnerability Description
FrontAccounting（FA）是FrontAccounting公司的一套适用于中小型企业ERP供应链的财务软件。该软件包括采购订单、商品票据和账务分类与预算等模块。 FrontAccounting在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上执行任意命令。 rontAccounting的access/login.php和includes/lang/language.php文件中没有正确地验证对path_to_root参数的输入，允许远程攻击者通过包含本地或外部资源的任意文件导
CVSS Information
N/A
Vulnerability Type
N/A