Lucene search
+L

2 matches found

CNVD
CNVD
added 2015/11/07 12:0 a.m.6 views

Accentis 'SIDX' Parameter SQL Injection Vulnerability

Accentis is a suite of management software for ERP, CRM, payroll, production and inventory management. Accentis fails to properly filter the 'SIDX' parameter, allowing remote attackers to exploit the vulnerability to submit specially crafted SQL query operations or obtain database data...

8.8CVSS7.5AI score0.01566EPSS
SaveExploits2References1
CNVD
CNVD
added 2015/11/07 12:0 a.m.5 views

Accentis Cross-Site Scripting Vulnerability

Accentis is a suite of management software for ERP, CRM, payroll, production and inventory management. Accentis fails to properly filter the 'ctl00$cphcontent$uigformState' parameter, allowing remote attackers to exploit the vulnerability by injecting malicious script or HTML code, obtaining...

6.1CVSS6.6AI score0.00949EPSS
SaveExploits2References1
Rows per page
Query Builder