CVE-2024-42563

An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file...

CVE-2024-42563

An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file...

CVE-2024-42563

An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file...

PT-2024-30024 · Erp · Erp

Name of the Vulnerable Software and Affected Versions: ERP affected versions not specified Description: A SQL injection vulnerability was discovered in ERP commit 44bd04. The issue is related to the id parameter at the "/index.php/basedata/inventory/delete?action=delete" endpoint. This allows for...

PT-2024-30023 · Erp · Erp

Name of the Vulnerable Software and Affected Versions: ERP commit 44bd04 Description: An arbitrary file upload vulnerability allows attackers to execute arbitrary code via uploading a crafted HTML file. Recommendations: For ERP commit 44bd04, consider restricting the upload functionality to preve...