SAP Business Objects Web Intelligence跨站脚本漏洞

SAP Business Objects Web Intelligence is a centralized suite from SAP, a German company used for data reporting, visualization and sharing. SAP Business Objects Web Intelligence is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to compromise vulnerable...

Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

Microsoft Dynamics is a suite of ERP business solutions for multinational companies from Microsoft Corporation. Microsoft Dynamics 365 on-premises has a remote code execution vulnerability, for which no details are available...

SAP NetWeaver AS SQL Injection Vulnerability

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. SAP NetWeaver AS has a SQL injection vulnerability that can be exploited by attackers to threaten vulnerable systems, including Business Objects, SAP...

Microsoft Dynamics GP Remote Code Execution Vulnerability

Microsoft Dynamics is a set of ERP business solutions for multinational companies from the US company Microsoft Microsoft. The product includes financial management, production management and business intelligence management, etc. Microsoft Dynamics GP has a remote code execution vulnerability, n...

Microsoft Dynamics GP Elevation of Privilege Vulnerability (CNVD-2022-22722)

Microsoft Dynamics is a set of ERP business solutions for multinational companies from the US company Microsoft Microsoft. The product includes financial management, production management and business intelligence management, etc. Microsoft Dynamics GP has an elevation of privilege vulnerability,...

Microsoft Dynamics GP欺骗漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational companies from the United States-based Microsoft Corporation Microsoft. The product includes financial management, production management and business intelligence management, etc. Microsoft Dynamics GP has a spoofing...

Microsoft Dynamics Elevation of Privilege Vulnerability

Microsoft Dynamics is a suite of ERP business solutions for multinational companies from Microsoft Corporation USA. The product includes financial management, production management and business intelligence management, etc. An elevation of privilege vulnerability exists in Microsoft Dynamics GP. ...

Microsoft Dynamics GP Elevation of Privilege Vulnerability

Microsoft Dynamics is a set of ERP business solutions for multinational companies from the US company Microsoft Microsoft. The product includes financial management, production management and business intelligence management, etc. Microsoft Dynamics GP has an elevation of privilege vulnerability,...

CVE-2022-22535

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause...

Authorization

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause...

CVE-2022-22535

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause...

CVE-2022-22535

CVE-2022-22535 is described as a permissions issue in SAP ERP HCM Portugal (versions 600–608) where a payroll-report reads payroll data without proper authorization checks. The root cause is insufficient access checks for that report, enabling read-only exposure of payroll information in a specif...

MartDevelopers iResturant SQL Injection Vulnerability (CNVD-2022-91165)

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya. used to integrate social restaurant operations into one system. a SQL injection vulnerability exists in MartDevelopers iResturant v1.0, which stems from adding this when viewing a reservation view...

MartDevelopers iResturant SQL Injection Vulnerability (CNVD-2022-91164)

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya. used to integrate social restaurant operations into one system. martDevelopers iResturant 1.0 is vulnerable to a SQL injection vulnerability that stems from adding email and phone parameter values ar...

CVE-2021-46113

In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service...

CVE-2021-46113

In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service...

Remote code execution

In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service...

CVE-2021-46113

CVE-2021-46113 affects MartDevelopers KEA-Hotel-ERP (open source). A remote code execution vulnerability is exploited via uploading PHP files through the service’s file upload feature. The issue is documented across multiple sources (NVD, CVE listing, CNNVD) and indicates RCE with potential unaut...

CVE-2021-46113

In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service...

MartDevelopers KEA-Hotel-ERP 代码问题漏洞

MartDevelopers KEA-Hotel-ERP is an open source lightweight hotel enterprise resource planning system. A security vulnerability exists in MartDevelopers KEA-Hotel-ERP that can be exploited by an attacker to upload PHP files using a file upload vulnerability in the service to exploit a remote code...