Lucene search
+L

3466 matches found

zdt
zdt
•added 2020/04/30 12:00 a.m.•73 views

School ERP Pro 1.0 - Arbitrary File Read Vulnerability

Exploit for php platform in category web applications Exploit Title: School ERP Pro 1.0 - Arbitrary File Read Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/04/29 12:00 a.m.•92 views

School ERP Pro 1.0 Arbitrary File Read

Exploit Title: School ERP Pro 1.0 - Arbitrary File Read Date: 2020-04-28 Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT CVE: N/A Vulnerable code:...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2020/04/29 12:00 a.m.•210 views

School ERP Pro 1.0 - Arbitrary File Read

Exploit Title: School ERP Pro 1.0 - Arbitrary File Read Date: 2020-04-28 Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT CVE: N/A Vulnerable code:...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2020/04/28 12:00 a.m.•176 views

School ERP Pro 1.0 - Remote Code Execution

Exploit Title: School ERP Pro 1.0 - Remote Code Execution Date: 2020-04-28 Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT Description...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2020/04/28 12:00 a.m.•356 views

School ERP Pro 1.0 - 'es_messagesid' SQL Injection

Exploit Title: School ERP Pro 1.0 - 'esmessagesid' SQL Injection Date: 2020-04-28 Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT SQL Injection Detail...

5.3AI score
SaveExploits0
NVD
NVD
•added 2020/04/24 11:15 p.m.•25 views

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

5.5CVSS5.4AI score0.00654EPSS
SaveExploits0References2
Prion
Prion
•added 2020/04/24 11:15 p.m.•33 views

Authorization

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

5.5CVSS5.5AI score0.00654EPSS
SaveExploits0References2Affected Software2
attackerkb
attackerkb
•added 2020/04/24 11:15 p.m.•13 views

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

5.5CVSS5.5AI score0.00654EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2020/04/24 10:18 p.m.•36 views

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

5.4CVSS5.5AI score0.00654EPSS
SaveExploits0References2
CVE
CVE
•added 2020/04/24 10:18 p.m.•129 views

CVE-2020-6212

The CVE-2020-6212 entry affects SAP ERP and SAP S/4HANA. Specifically, it concerns Egypt localization reports: Clearing of Liabilities, Remittance Statement, and Summary for SAP ERP versions 618, 730, EAPPLGLO 607, and SAP S/4 HANA versions 100–104. The root cause is Missing Authorization Check, ...

5.5CVSS5.4AI score0.00654EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2020/04/24 12:00 a.m.•4 views

PT-2020-19011

Name of the Vulnerable Software and Affected Versions SAP ERP versions 607 through 730 S/4 HANA versions 100 through 104 Description The issue concerns the Egypt localized withholding tax reports in SAP systems, where the Clearing of Liabilities and Remittance Statement and Summary do not perform...

5.5CVSS0.00654EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/24 12:00 a.m.•9 views

CVE-2020-6212: Missing Authorization

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

5.5CVSS5.9AI score0.00654EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/04/17 12:00 a.m.•20 views

Dolibarr ERP/CRM Admin Tools Cross-Site Scripting Vulnerability

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, etc. Admin Tools is one of the management tools. A cross-site scripting...

5.4CVSS5.2AI score0.00698EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/04/17 12:00 a.m.•21 views

Dolibarr ERP/CRM Cross-Site Request Forgery Vulnerability (CNVD-2021-28748)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site request forgery vulnerability exists in Dolibarr...

8.8CVSS6.7AI score0.01011EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/03/16 8:15 p.m.•53 views

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

9.8CVSS5.7AI score0.03885EPSS
SaveExploits1References3
NVD
NVD
•added 2020/03/16 8:15 p.m.•44 views

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

9.8CVSS9.1AI score0.03885EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2020/03/16 8:15 p.m.•41 views

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

9.8CVSS7.2AI score0.03885EPSS
SaveExploits1References4
Prion
Prion
•added 2020/03/16 8:15 p.m.•27 views

Cross site scripting

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

7.5CVSS8.9AI score0.03885EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2020/03/16 7:48 p.m.•90 views

CVE-2019-19212

Vulnerability summary (CVE-2019-19212) : Dolibarr ERP/CRM versions 3.0 through 10.0.3 are affected by a cross-site scripting (XSS) flaw in the qty parameter on the product/fournisseurs.php (product price screen). The root cause is an XSS issue in the handling of this parameter leading to script e...

9.8CVSS8.9AI score0.03885EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2020/03/16 7:48 p.m.•48 views

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

9.1AI score0.03885EPSS
SaveExploits1References3
Rows per page
Query Builder