An issue exists in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php.
frontaccounting frontaccounting 2.4.7