https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T07:40:05.737852+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-136973 EUVD-2026-136973 2026-10-16T07:40:05.740490+00:00 EUVD-2026-136973 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5148 fkie_cve-2007-5148 2026-10-16T07:40:05.740527+00:00

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/logout.php or certain PHP scripts under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, (7) purchasing/, (8) reporting/, (9) sales/, or (10) taxes/. NOTE: the config.php vector is already covered by CVE-2007-4279, and the login.php and language.php vectors are already covered by CVE-2007-5117. NOTE: this issue is disputed by CVE because path_to_root is defined before use in all of the other files reported in the original disclosure

 https://cve.radiocsirt.org/vuln/ghsa-rvpr-2mjf-wch6 GHSA-rvpr-2mjf-wch6 2026-10-16T07:40:05.740577+00:00

** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/logout.php or certain PHP scripts under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, (7) purchasing/, (8) reporting/, (9) sales/, or (10) taxes/. NOTE: the config.php vector is already covered by CVE-2007-4279, and the login.php and language.php vectors are already covered by CVE-2007-5117. NOTE: this issue is disputed by CVE because path_to_root is defined before use in all of the other files reported in the original disclosure.

 https://cve.radiocsirt.org/vuln/gsd-2007-5148 gsd-2007-5148 2026-10-16T07:40:05.740614+00:00 gsd-2007-5148