Lucene search
HistoryMar 23, 2023 - 9:15 p.m.
CVE-2023-24788
notrinoserp
v0.7
sql injection
ordernumber parameter
vulnerability
nvd
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
56.4%
NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php.
Affected configurations
Node
notrinosnotrinoserpMatch0.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| notrinos:notrinoserp | notrinos notrinoserp | eq | 0.7 |
Related
github
github
NotrinosERP vulnerable to SQL Injection
2023-03-23 21:30:19
osv
osv
CVE-2023-24788
2023-03-23 21:15:19
NotrinosERP vulnerable to SQL Injection
2023-03-23 21:30:19
zdt
zdt
NotrinosERP 0.7 - Authenticated Blind SQL Injection Exploit
2023-04-07 00:00:00
veracode
veracode
SQL Injection
2023-03-31 02:38:13
prion
prion
Sql injection
2023-03-23 21:15:00
nvd
nvd
CVE-2023-24788
2023-03-23 21:15:19
packetstorm
packetstorm
NotrinosERP 0.7 SQL Injection
2023-04-10 00:00:00
cvelist
cvelist
CVE-2023-24788
2023-03-23 00:00:00
exploitdb
exploitdb
NotrinosERP 0.7 - Authenticated Blind SQL Injection
2023-04-07 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
56.4%
Related for CVE-2023-24788