All 6 CVE vulnerabilities found in FrontAccounting, with AI-generated Chinese analysis, references, and POCs.
Vendor: FrontAccounting
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-80211 | FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage CWE-916 | 5.9 | Medium | 2026-08-27 |
| CVE-2026-80210 | FrontAccounting through 2.4.20 Cross-Site Request Forgery on Financial Transaction Forms CWE-352 | 6.5 | Medium | 2026-08-27 |
| CVE-2026-40521 | FrontAccounting < 2.4.20 Path Traversal RCE via attachment upload CWE-22 | 8.8 | High | 2026-06-29 |
| CVE-2026-40522 | FrontAccounting < 2.4.20 SQL Injection via rep601.php CWE-89 | 7.1 | High | 2026-06-29 |
| CVE-2026-40523 | FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php CWE-89 | 8.1 | High | 2026-06-29 |
| CVE-2026-40524 | FrontAccounting < 2.4.20 SQL Injection via get_gl_transactions() CWE-89 | 8.1 | High | 2026-06-29 |
All 6 known CVE vulnerabilities affecting FrontAccounting with full Chinese analysis, references, and POCs where available.