CVE-2022-31593: Improper Neutralization of Special Elements in Output Used by a Downstream Component

SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

PT-2022-3939

Name of the Vulnerable Software and Affected Versions SAP Business One client version 10.0 Description The issue is related to insufficient cleaning of special elements in output used by an incoming component, which can be exploited by a remote attacker to execute arbitrary code. This allows an...