← All credits
Wiktor Sędkowski of Nokia and Trevor Christiansen of Rapid7 discovered and reported this issue through Rapid7's vulnerability disclosure program.
9 vulnerability records and advisories credit this contributor.
CVE-2021-36805
Akaunting Invoice Footer Persistent XSS
CVE-2021-31869
Pimcore AdminBundle 'specificID' SQL Injection
CVE-2021-36802
Akaunting DoS via User-Controlled 'locale' Variable
CVE-2021-3539
EspoCRM Avatar Persistent XSS
CVE-2021-31867
Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection
CVE-2021-36803
Akaunting Avatar Persistent XSS
CVE-2021-36804
Akaunting Password Reset Relay
CVE-2021-36800
Akaunting OS Command Injection in 'Money.php'
CVE-2021-36801
Akaunting Authentication Bypass in Company Selection