Lucene search
+L

16 matches found

Positive Technologies
Positive Technologies
•added 2026/05/29 12:00 a.m.•37 views

PT-2026-44870

MaxOn ERP Software 8.x-9.x contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis parameters in the log activity function. Attackers can send POST requests to /index.php/user/log activity with malicious SQL code ...

7.1CVSS6.1AI score0.00273EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/29 12:00 a.m.•2 views

CVE-2018-25392: Improper Neutralization of Special Elements used in an SQL Command

MaxOn ERP Software 8.x-9.x contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis parameters in the logactivity function. Attackers can send POST requests to /index.php/user/logactivity with malicious SQL code in...

7.1CVSS6.3AI score0.00273EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/29 12:00 a.m.•24 views

Maxon ERP SQL注入漏洞

Maxon ERP is an ERP software developed by Maxon ERP Corporation. The SQL injection vulnerability exists in versions 8.x to 9.x of Maxon ERP Software. This vulnerability stems from the nomor, user, and jenis parameters in the logactivity function, which may allow authenticated users to execute...

7.1CVSS6.1AI score0.00273EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2022-43214

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00704EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/02/06 12:41 a.m.•15 views

CVE-2022-3878

A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchaseorder/browsedata. The manipulation of the argument tbsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

9.8CVSS7.3AI score0.00704EPSS
SaveExploits1References1
NVD
NVD
•added 2022/11/07 4:15 p.m.•29 views

CVE-2022-3878

A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchaseorder/browsedata. The manipulation of the argument tbsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

9.8CVSS0.00704EPSS
SaveExploits1References2
Prion
Prion
•added 2022/11/07 4:15 p.m.•24 views

Sql injection

A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchaseorder/browsedata. The manipulation of the argument tbsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

7.5CVSS9.7AI score0.00704EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/11/07 12:00 a.m.•18 views

Maxon ERP SQL注入漏洞

Maxon ERP is an ERP software from Maxon ERP, Inc. A security vulnerability exists in Maxon ERP that stems from an incorrect manipulation of the parameter tbsearch resulting in sql injection...

9.8CVSS8.2AI score0.00704EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/11/07 12:00 a.m.•8 views

CVE-2022-3878 Maxon ERP browse_data sql injection

A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchaseorder/browsedata. The manipulation of the argument tbsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

7.3CVSS7.4AI score0.00704EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/11/07 12:00 a.m.•36 views

CVE-2022-3878 Maxon ERP browse_data sql injection

A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchaseorder/browsedata. The manipulation of the argument tbsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

7.3CVSS10AI score0.00704EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/07 12:00 a.m.•6 views

CVE-2022-3878: Improper Neutralization

A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchaseorder/browsedata. The manipulation of the argument tbsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

9.8CVSS8AI score0.00704EPSS
SaveExploits1References3
CVE
CVE
•added 2022/11/07 12:00 a.m.•101 views

CVE-2022-3878

CVE-2022-3878 : Maxon ERP is affected by a SQL injection in the file path /index.php/purchase_order/browse_data, triggered by manipulating the tb_search argument. Multiple sources describe this as a remote, high-severity issue with a CVSS 3.1 base score of 9.8 (critical, network access, no authen...

9.8CVSS8AI score0.00704EPSS
SaveExploits1References2Affected Software1
zdt
zdt
•added 2018/10/15 12:00 a.m.•32 views

MaxOn ERP Software 8.x-9.x - nomor SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://www.talagasoft.com Software Link: http://demo.maxonerp.com/ Software Download:...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2018/10/15 12:00 a.m.•43 views

MaxOn ERP Software 8.x / 9.x SQL Injection

Exploit Title: MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.talagasoft.com Software Link: http://demo.maxonerp.com/ Software Download: https://datapacket.dl.sourceforge.net/project/maxon/maxon.rar Version:...

0.2AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/10/15 12:00 a.m.•29 views

MaxOn ERP Software 8.x-9.x - nomor SQL Injection

MaxOn ERP Software 8.x-9.x - nomor SQL Injection Exploit Title: MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.talagasoft.com Software Link: http://demo.maxonerp.com/ Software Download:...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/10/15 12:00 a.m.•567 views

MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection

Exploit Title: MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.talagasoft.com Software Link: http://demo.maxonerp.com/ Software Download: https://datapacket.dl.sourceforge.net/project/maxon/maxon.rar Version:...

5.3AI score
SaveExploits0
Rows per page
Query Builder