CVE-2019-5893: Improper Neutralization of Special Elements used in an SQL Command

Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter...

OpenSource ERP 6.3.1. - SQL Injection

Exploit Title: OpenSource ERP SQL Injection Date: 10.01.2019 Exploit Author: Emre ÖVÜNÇ Vendor Homepage: http://www.nelson-it.ch Software Link: http://sourceforge.net/projects/opensourceerp/files/Windows/erp6.3.1.exe/download Version: v6.3.1 Tested on: Windows CVE-2019-5893...

eBrigade ERP 4.5 - SQL Injection

Exploit Title: eBrigade ERP 4.5 - SQL Injection Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://ebrigade.net/ Software Link: https://netcologne.dl.sourceforge.net/project/ebrigade/ebrigade/eBrigade%204.5/ebrigade4.5.zip Version: 4.5 Category: Webapps Tested on:...

eBrigade ERP 4.5 - Arbitrary File Download

!/usr/bin/python import mechanize, sys, cookielib, requests import colorama, urllib, re, random, urllib2 import wget from colorama import Fore from tqdm import tqdm from pathlib import Path def bannerche: print ''' @-------------------------------------------------------------@ | eBrigade ERP "...

Dolibarr ERP-CRM 8.0.4 SQL Injection

Title: Dolibarr ERP-CRM 8.0.4 - 'rowid' SQL Injection Date: 08.01.2019 Exploit Author: Mehmet Ander Key Vendor Homepage: https://www.dolibarr.org/ Software Link: https://sourceforge.net/projects/dolibarr/files/Dolibarr%20ERP-CRM/8.0.4/dolibarr-8.0.4.zip Version: v8.0.4 Category: Webapps Tested on...

Dolibarr ERP-CRM 8.0.4 - rowid SQL Injection

Dolibarr ERP-CRM 8.0.4 - rowid SQL Injection Title: Dolibarr ERP-CRM 8.0.4 - 'rowid' SQL Injection Date: 08.01.2019 Exploit Author: Mehmet Önder Key Vendor Homepage: https://www.dolibarr.org/ Software Link: https://sourceforge.net/projects/dolibarr/files/Dolibarr%20ERP-CRM/8.0.4/dolibarr-8.0.4.zi...

Dolibarr ERP-CRM 8.0.4 - rowid SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Dolibarr ERP-CRM 8.0.4 - 'rowid' SQL Injection Exploit Author: Mehmet Önder Key Vendor Homepage: https://www.dolibarr.org/ Software Link: https://sourceforge.net/projects/dolibarr/files/Dolibarr%20ERP-CRM/8.0.4/dolibarr-8.0.4.zip Versio...

Dolibarr ERP-CRM 8.0.4 - 'rowid' SQL Injection

Title: Dolibarr ERP-CRM 8.0.4 - 'rowid' SQL Injection Date: 08.01.2019 Exploit Author: Mehmet Önder Key Vendor Homepage: https://www.dolibarr.org/ Software Link: https://sourceforge.net/projects/dolibarr/files/Dolibarr%20ERP-CRM/8.0.4/dolibarr-8.0.4.zip Version: v8.0.4 Category: Webapps Tested on...

CVE-2018-19799

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS...

CVE-2018-19799

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS...

Cross site scripting

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS...

UBUNTU-CVE-2018-19799

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS...

CVE-2018-19799

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS...

CVE-2018-19799

Dolibarr ERP/CRM

CVE-2018-19799

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS...

CVE-2018-19799

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS...

PT-2018-15100

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM versions 8.0.3 and earlier Description The issue concerns a XSS vulnerability. It affects the "/exports/export.php" endpoint, specifically the datatoexport parameter. Recommendations For versions 8.0.3 and earlier, as a...

CVE-2018-19799: Improper Neutralization of Input During Web Page Generation

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS...

FrontAccounting 2.4.5 - SubmitUser SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: FrontAccounting 2.4.5 - 'SubmitUser' SQL Injection Exploit Author: Sainadh Jamalpur Vendor Homepage: http://frontaccounting.com/ Software Link: https://sourceforge.net/projects/frontaccounting/ Version: 2.4.5 Tested on: XAMPP...

PT-2018-3120

Name of the Vulnerable Software and Affected Versions Galaktika ERP affected versions not specified Description The issue is related to architectural weaknesses in components .res files of the Galaktika ERP system, which have the functionality to export to XML files. Exploitation of this issue ma...