CVE-2024-44757

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44759

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44756

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

CVE-2024-44758

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...

CVE-2024-44757: Improper Control of Generation of Code

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44756: Improper Neutralization of Special Elements used in an SQL Command

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

PT-2024-31235

Name of the Vulnerable Software and Affected Versions NUS-M9 ERP Management Software version 3.0.0 Description The issue is a SQL injection vulnerability that can be exploited via the usercode parameter at the "/UserWH/checkLogin" API endpoint. This allows for potential unauthorized access to...

CVE-2024-44757

The NUS-M9 ERP Management Software v3.0.0 contains an arbitrary file download vulnerability in the /Basics/DownloadInpFile component. An attacker can exploit this flaw by sending a crafted interface request to download arbitrary files and gain access to sensitive information . While no patch is c...

PT-2024-31236 · Unknown · Nus-M9 Erp Management

Name of the Vulnerable Software and Affected Versions: NUS-M9 ERP Management Software version 3.0.0 Description: An arbitrary file download issue in the /Basics/DownloadInpFile component allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44759: Improper Neutralization of Special Elements used in an OS Command

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

PT-2024-31237

Name of the Vulnerable Software and Affected Versions NUS-M9 ERP Management Software version 3.0.0 Description An arbitrary file upload issue in the /Production/UploadFile component allows attackers to execute arbitrary code by uploading crafted files. Recommendations For NUS-M9 ERP Management...

PT-2024-31238

Name of the Vulnerable Software and Affected Versions NUS-M9 ERP Management Software version 3.0.0 Description An arbitrary file download issue in the /Doc/DownloadFile component allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44758: Improper Control of Generation of Code

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...