8 matches found
PT-2023-14707
Name of the Vulnerable Software and Affected Versions znfit Home improvement ERP management system versions V42 through V50 20220207 Description The issue allows attackers to execute arbitrary SQL commands via the userCode parameter to the WeChat applet, potentially leading to unauthorized data...
CVE-2022-45564
SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...
CVE-2022-45564
SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...
CVE-2022-45564: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...
CVE-2022-45564
CVE-2022-45564 is a SQL injection vulnerability in znfit Home improvement ERP management system (versions V50_20220207, v42) that allows executing arbitrary SQL via the userCode parameter in the WeChat applet. The issue is critical (CVSS v3.1: 9.8, NETWORK, NONE required, no user interaction), af...
Unauthorized Access Vulnerability in concrete friend mixing plant ERP management system
Hunan AOKE Network Technology Co., Ltd. was founded in 2011, located in Changsha, Hunan Province, the capital of construction machinery, to create the most forward-looking parts trading platform in the concrete industry, and is China's leading provider of information technology solutions for...
SQL Injection Vulnerability in Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.
Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. There is a SQL injection vulnerability in the Home Decoration ERP Management System of Shanghai Decoration Alliance Information Technology Co., Ltd, which can be exploited by attackers ...