EUVD-2025-6205

Malicious code in bioql PyPI...

CVE-2024-42844

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 P21 up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information...

PT-2025-9926

Name of the Vulnerable Software and Affected Versions EPICOR Prophet 21 P21 versions up to 23.2.5232 Description A SQL Injection issue has been identified, allowing authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields, potentially obtaining...

EPICOR Prophet 21 security vulnerability

EPICOR Prophet 21 is an enterprise resource planning software from EPICOR, Inc. that is used for enterprise resource management, pricing, and other operations. A security vulnerability exists in EPICOR Prophet 21 version 23.2.5232 and prior versions, which stems from uncleaned user input fields a...

CVE-2024-42844

A SQL Injection vulnerability exists in EPICOR Prophet 21 (P21) in versions up to 23.2.5232 . The flaw stems from unsanitized user input fields , which allows authenticated remote attackers to execute arbitrary SQL commands. Successful exploitation could lead to the unauthorized retrieval of info...

CVE-2024-42844

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 P21 up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information...

CVE-2024-42844: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 P21 up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information...

CVE-2024-42844

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 P21 up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information...