PT-2018-10496

Name of the Vulnerable Software and Affected Versions Frappe ERPNext versions prior to the fixed version Description A cross-site scripting XSS issue was discovered in Frappe ERPNext. The issue is related to a comment. Recommendations At the moment, there is no information about a newer version...

erpnext.com XSS vulnerability

Open Bug Bounty ID: OBB-440046 Description| Value ---|--- Affected Website:| erpnext.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2017-1000120

ERPNextFrappe Version = 7.1.27 SQL injection vulnerability in frappe.share.getusers allows remote authenticated users to execute arbitrary SQL commands via the fields parameter...

Sql injection

ERPNextFrappe Version = 7.1.27 SQL injection vulnerability in frappe.share.getusers allows remote authenticated users to execute arbitrary SQL commands via the fields parameter...

CVE-2017-1000120: Improper Neutralization of Special Elements used in an SQL Command

ERPNextFrappe Version = 7.1.27 SQL injection vulnerability in frappe.share.getusers allows remote authenticated users to execute arbitrary SQL commands via the fields parameter...

CVE-2017-1000120

ERPNextFrappe Version = 7.1.27 SQL injection vulnerability in frappe.share.getusers allows remote authenticated users to execute arbitrary SQL commands via the fields parameter...

CVE-2017-1000120

CVE-2017-1000120 affects ERPNext/Frappe (Version

erpnext.org XSS vulnerability

Vulnerable URL:...