CVE-2024-7837

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Firmanet Software ERP allows SQL Injection. This issue affects ERP: through 22.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2024-7837 SQLi in Firmanet Software's ERP

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Firmanet Software ERP allows SQL Injection. This issue affects ERP: before 15.0.1...

CVE-2024-7837 SQLi in Firmanet Software's ERP

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Firmanet Software ERP allows SQL Injection. This issue affects ERP: before 15.0.1...

CVE-2024-7837

The CVE-2024-7837 entry concerns Firmanet Software ERP with an SQL Injection flaw caused by improper neutralization of special elements in SQL commands. Affected are ERP versions prior to 22.11.2024. The vulnerability potentially allows unauthorized SQL execution, as described in multiple connect...

Firmanet ERP SQL注入漏洞

Firmanet ERP is an e-commerce system from Firmanet, Inc. A SQL injection vulnerability exists in Firmanet ERP version 22.11.2024 and earlier, which stems from vulnerability to SQL injection attacks...

Apache OFBiz code issue vulnerability (CNVD-2024-46271)

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A security vulnerability exists in Apache OFBiz that stems from the product's failure to properly validate...

CVE-2024-44756

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

CVE-2024-44757

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44756

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

CVE-2024-44757

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44756

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

NUS-M9 安全漏洞

NUS-M9 is an ERP system from China Zhelin NUS Company. A security vulnerability exists in NUS-M9 v3.0.0, which is caused by a SQL injection in the usercode parameter...

NUS-M9 安全漏洞

NUS-M9 is an ERP system from China Zhelin NUS Company. A security vulnerability exists in NUS-M9 v3.0.0, which originates from the presence of an arbitrary file download in the component /Basics/DownloadInpFile, which allows an attacker to request the download of an arbitrary file and gain access...

PT-2024-31236 · Unknown · Nus-M9 Erp Management

Name of the Vulnerable Software and Affected Versions: NUS-M9 ERP Management Software version 3.0.0 Description: An arbitrary file download issue in the /Basics/DownloadInpFile component allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44756

Affected software: NUS-M9 ERP Management Software v3.0.0. Vulnerability: SQL injection in the login check, via the usercode parameter at /UserWH/checkLogin. Impact as stated: CVSS v3.1 base score 9.8 (CRITICAL) with HIGH confidentiality, integrity, and availability impact; attack vector NETWORK, ...

CVE-2024-44757

CVE-2024-44757 describes an arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0, exploitable via a crafted interface request that can expose sensitive files. The initial data indicates a high-severity impact (C:H/I:N/A:N, CVSS 3....

CVE-2024-44757

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44758

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...

CVE-2024-44759

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44759

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...