CVE-2014-125080 - CVE House

Back to Database

Status published Medium CVE-2014-125080

frontaccounting faplanet path traversal

5.5 CVSS

Vulnerability Description

A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue. VDB-218398 is the identifier assigned to this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-125080

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

VulDB GitHub Commit Analyzer

References

More from frontaccounting

View All →

An issue was discovered in FrontAccounting 2.4.7. There is a...

includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in...

FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to...

CVE-2018-1000890

FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability...

Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow...

Affected Vendor

frontaccounting

View all reports →

Affected Software

faplanet

Vulnerable Versions:

Unknown

Timeline

Official Publish: January 16th, 2023

Last Modified: August 6th, 2024

Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1005 Data from Local System

T1552 Unsecured Credentials

Credential Access

T1565.001 Stored Data Manipulation