3466 matches found
alcali (>=2018.3.4, <=3000.1.0), corgy-erp (>=0.0.1, <=1.0.7) +41 more potentially affected by CVE-2020-13254 via django (>=3.0.0, <=3.0.6)
django PYPI version =3.0.0, =2018.3.4, =0.0.1, =0.2.0, =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.11.5 and more Source cves: CVE-2020-13254 Source advisory: GHSA-WPJR-J57X-WXFW...
GESTI?NINTEGRAL ONLINE GESIO ERP SQL Injection Vulnerability
GESTI?NINTEGRAL ONLINE GESIO ERP is a suite of online ERP Enterprise Resource Planning management software from GESTI?NINTEGRAL ONLINE, Spain. The program supports billing, inventory management and business management. A SQL injection vulnerability exists in php files in GESTI?NINTEGRAL ONLINE...
Unspecified Vulnerability in 2pi Software Cmfive
2pi Software Cmfive is Australia's 2pi Software's set of PHP language , mainly used for ERP systems built on open source Web application framework . A security vulnerability exists in the system/classes/DbPDO.php file in 2pi Software Cmfive versions 2015-03-15 and earlier, which can be exploited ...
CVE-2020-8967
There is an improper Neutralization of Special Elements used in an SQL Command SQL Injection vulnerability in php files of GESIO ERP. GESIO ERP all versions prior to 11.2 allows malicious users to retrieve all database information...
CVE-2020-8967
There is an improper Neutralization of Special Elements used in an SQL Command SQL Injection vulnerability in php files of GESIO ERP. GESIO ERP all versions prior to 11.2 allows malicious users to retrieve all database information...
Sql injection
There is an improper Neutralization of Special Elements used in an SQL Command SQL Injection vulnerability in php files of GESIO ERP. GESIO ERP all versions prior to 11.2 allows malicious users to retrieve all database information...
CVE-2020-8967 GESIO SQL injection vulnerability
There is an improper Neutralization of Special Elements used in an SQL Command SQL Injection vulnerability in php files of GESIO ERP. GESIO ERP all versions prior to 11.2 allows malicious users to retrieve all database information...
CVE-2020-8967
CVE-2020-8967 | GESIO ERP SQL injection : The vulnerability is in PHP files of GESIO ERP, with an improper Neutralization of Special Elements used in SQL commands. All versions prior to 11.2 are affected and allow a malicious user to retrieve database information. Evidence from multiple sources c...
CVE-2020-8967: Improper Neutralization of Special Elements used in an SQL Command
There is an improper Neutralization of Special Elements used in an SQL Command SQL Injection vulnerability in php files of GESIO ERP. GESIO ERP all versions prior to 11.2 allows malicious users to retrieve all database information...
PT-2020-20403
Name of the Vulnerable Software and Affected Versions GESIO ERP versions prior to 11.2 Description The issue is related to an improper Neutralization of Special Elements used in an SQL Command, also known as SQL Injection, in the php files of GESIO ERP. This allows malicious users to retrieve all...
Unauthorized Access Vulnerability in UFIDA NC Cloud at UFIDA Network Technology Co.
NC Cloud is a new-generation cloud ERP product developed by UFIDA's IoT, big data, artificial intelligence and other technologies. An unauthorized access vulnerability exists in UFIDA NC Cloud, which can be exploited by attackers to cause data and information leakage...
Dolibarr ERP/CRM DMS/ECM Module Cross-Site Scripting Vulnerability
Dolibarr ERP/CRM is a Web-based Enterprise Resource Planning ERP and Customer Relationship Management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, etc. DMS/ECM is one of the document management systems and enterprise...
Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2020-33669)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...
erp-selectie.nl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1159025 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting
Exploit Title: OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting Date: 2020-05-11 Exploit Author: Vulnerability-Lab Vendor: https://www.openz.de/ https://www.openz.de/download.html Document Title: =============== OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability References Source:...
OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting Vendor: https://www.openz.de/ https://www.openz.de/download.html Document Title: =============== OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability Product & Service...
OpenZ ERP 3.6.60 Cross Site Scripting
Document Title: =============== OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2234 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ====================================...
PhreeBooks ERP 5.2.5 - Remote Command Execution Vulnerability
Exploit for php platform in category web applications Exploit Title: PhreeBooks ERP 5.2.5 - Remote Command Execution Author: Besim ALTINOK Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.4, v5.2.5 Tested on: Xampp Credit: İsmai...
PhreeBooks ERP 5.2.5 Remote Command Execution
Exploit Title: PhreeBooks ERP 5.2.5 - Remote Command Execution Date: 2020-05-01 Author: Besim ALTINOK Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.4, v5.2.5 Tested on: Xampp Credit: İsmail BOZKURT...
OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability
Document Title: =============== OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2234 Release Date: ============= 2020-05-05 Vulnerability Laboratory ID VL-ID: ====================================...