WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)

Software WP ERP Type Plugin Vulnerable versions = 1.12.3 Fixed in 1.12.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34008 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fd4a51a5838f Credits minhtuanact Required...

erp-informatie.nl Cross Site Scripting vulnerability OBB-3366685

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-27742

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

CVE-2023-27742

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

Sql injection

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

PT-2023-21313 · Unknown · Idurar Erp/Crm

Name of the Vulnerable Software and Affected Versions: IDURAR ERP/CRM version 1 Description: The issue is related to a SQL injection vulnerability. It affects the /api/login component. Recommendations: For IDURAR ERP/CRM version 1, consider restricting access to the /api/login endpoint until a...

IDURAR ERP/CRM SQL注入漏洞

IDURAR ERP/CRM is an open source content management system by Salah Eddine Lalami Individual Developer. A security vulnerability exists in IDURAR ERP/CRM v1, which was discovered to contain an SQL injection vulnerability via components/api/login...

CVE-2023-27742

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

CVE-2023-27742

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

CVE-2023-27742

CVE-2023-27742 affects IDURAR ERP/CRM v1, with a SQL injection vulnerability in the /api/login component. The issue is documented as a high-severity, network-accessible flaw (CVSS v3.1: 9.8, Confidentiality/Integrity/Availability Impact: High). The available sources consistently state the vulnera...

Apache OFBiz Path Traversal Vulnerability

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. Apache OFBiz suffers from a path traversal vulnerability that stems from the application failing to properl...

Design/Logic Flaw

ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting...

CVE-2022-30076

ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting...

CVE-2022-30076

CVE-2022-30076 affects ENTAB ERP 1.0. The issue is an information disclosure where an attacker can discover users’ full names by brute-forcing a sequence of student usernames (e.g., s10000–s20000) due to no rate limiting on login. Documented impact is exposure of user PIIs with potential leakage ...

CVE-2022-30076

ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting...

ENTAB ERP 1.0 Information Disclosure

Exploit Title: ENTAB ERP 1.0 - Username PII leak Date: 17.05.2022 Exploit Author: Deb Prasad Banerjee Vendor Homepage: https://www.entab.in Version: Entab ERP 1.0 Tested on: Windows IIS CVE: CVE-2022-30076 Vulnerability Name: Broken Access control via Rate Limits Description: In the entab softwar...

ENTAB ERP 1.0 - Username PII leak Vulnerability

Exploit Title: ENTAB ERP 1.0 - Username PII leak Exploit Author: Deb Prasad Banerjee Vendor Homepage: https://www.entab.in Version: Entab ERP 1.0 Tested on: Windows IIS CVE: CVE-2022-30076 Vulnerability Name: Broken Access control via Rate Limits Description: In the entab software in...

Akinsoft Wolvox SQL注入漏洞

Akinsoft Wolvox is an ERP system from Akinsoft. A security vulnerability exists in Akinsoft Wolvox versions prior to 8.02.03, which stems from the discovery that it contains a SQL injection vulnerability...

CVE-2023-26760

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system...

CVE-2023-26760

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system...