PT-2023-21313 · Unknown · Idurar Erp/Crm

Name of the Vulnerable Software and Affected Versions: IDURAR ERP/CRM version 1 Description: The issue is related to a SQL injection vulnerability. It affects the /api/login component. Recommendations: For IDURAR ERP/CRM version 1, consider restricting access to the /api/login endpoint until a...

CVE-2023-27742

CVE-2023-27742 affects IDURAR ERP/CRM v1, with a SQL injection vulnerability in the /api/login component. The issue is documented as a high-severity, network-accessible flaw (CVSS v3.1: 9.8, Confidentiality/Integrity/Availability Impact: High). The available sources consistently state the vulnera...