Multiple SQL injection vulnerabilities in index.php in PHPAccounts 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) Outgoing_Type_ID (2) Outgoing_ID (3) Project_ID (4) Client_ID (5) Invoice_ID or (6) Vendor_ID parameter.