CVE-2018-1000890

FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can allow the attacker to…

published December 27, 2018

CVSS
—
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can allow the attacker to grab the entire database of the application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01779 · 78.1th percentile
Published
2018-12-27T18:00Z
EPSS history
Timeline
  • 27 DEC 18:00Z
    FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can allow the attacker to…
    cvelistv5