2753 matches found
CVE-2022-45564
SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...
CVE-2022-45564
SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...
Sql injection
SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...
CVE-2022-45564
CVE-2022-45564 is a SQL injection vulnerability in znfit Home improvement ERP management system (versions V50_20220207, v42) that allows executing arbitrary SQL via the userCode parameter in the WeChat applet. The issue is critical (CVSS v3.1: 9.8, NETWORK, NONE required, no user interaction), af...
CVE-2022-45564
SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...
CVE-2022-45564
SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...
CVE-2023-24528
CVE-2023-24528 affects SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) version 600. The vulnerability arises from a misconfigured application endpoint that is exposed over the network, enabling an authenticated attacker to view sensitive data (e.g., travel documents). The iss...
Top ERP Firm Exposing Half a Million Indian Job Seekers Data
By Waqas Apparently, the server belongs to a company based in the US with offices around the globe including India. This is a post from HackRead.com Read the original post: Top ERP Firm Exposing Half a Million Indian Job Seekers Data...
erp.pindad.com Open Redirect vulnerability OBB-3113208
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
erp-informatie.be Cross Site Scripting vulnerability OBB-3093082
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-41157
A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...
CVE-2022-41157
A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...
CVE-2022-41157
CVE-2022-41157 affects the sERP Server (Kyungrinara ERP solution) where a fixed password with SYSTEM authority creates a risk allowing leakage of sensitive data or execution of malicious commands. The connected documents confirm the vulnerability exists in the sERP server and describe the impact ...
CVE-2022-41157 ERP solution Remote Code Execution Vulnerability
A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...
PT-2022-25686 · Unknown · Kyungrinara
Name of the Vulnerable Software and Affected Versions: Kyungrinara affected versions not specified Description: The issue concerns a specific file on the sERP server of Kyungrinara, an ERP solution, which has a fixed password with SYSTEM authority. This could allow attackers to leak or steal...
CVE-2022-41157 ERP solution Remote Code Execution Vulnerability
A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...
CVE-2022-42989
ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting XSS vulnerability via the component Caixa de Entrada...
CVE-2022-42989
ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting XSS vulnerability via the component Caixa de Entrada...