CVE-2024-21747 WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting.This issue affects WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CR...

WordPress Plugin WP ERP SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP ERP is...

PT-2024-19034 · Wedevs · Wedevs Wp Erp

Name of the Vulnerable Software and Affected Versions: weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting versions 1.12.8 and earlier Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also...

WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection

Software WP ERP Type Plugin Vulnerable versions = 1.12.8 Fixed in 1.12.9 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-21747 Patch priority Medium CVSS severity Medium 7.6 Developer Claim ownership PSID bff329846441 Credits Arvandy Required privilege Accounting Manager...

Exploit for Code Injection in Apache Ofbiz

Apache OFBiz Authentication Bypass Vulnerability CVE-2023-514...

Exploit for CVE-2023-2744

Exploit Title: WP Plugins WP ERP = 1.12.2 - SQL Injection D...

Cross site scripting

IDURAR aka idurar-erp-crm through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data...

CVE-2023-50589

Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page...

Sql injection

Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page...

CVE-2023-50589

Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page...

PT-2023-31597 · Grupo Embras · Geosiap Erp

Name of the Vulnerable Software and Affected Versions: Grupo Embras GEOSIAP ERP version 2.2.167.02 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the codLogin parameter on the login page. Recommendations: For version 2.2.167.02, conside...

IDURAR ERP/CRM Cross-Site Scripting Vulnerability

IDURAR ERP/CRM is an open source content management system from the individual developer Salah Eddine Lalami. A cross-site scripting vulnerability exists in IDURAR ERP/CRM 2.0.1 and prior versions, which originates from the ability to execute cross-site scripting via the Edit Email Template featu...

CVE-2023-50589

The CVE-2023-50589 entry concerns Grupo Embras GEOSIAP ERP v2.2.167.02, where a SQL injection is exposed through the codLogin parameter on the login page. Affected component: GEOSIAP ERP login handling. Root cause: improper handling of input in codLogin enabling SQL injection; CVSS 3.1 metrics in...

Grupo Embras GEOSIAP ERP SQL Injection Vulnerability

Grupo Embras GEOSIAP ERP is an enterprise resource planning system from the Grupo Embras team. A SQL injection vulnerability exists in Grupo Embras GEOSIAP ERP version v2.2.167.02, which originates from a codLogin parameter in the login page that contains SQL injection...

Apache OFBiz Server-Side Request Forgery Vulnerability

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. Apache OFBiz suffers from a server-side request forgery vulnerability that can be exploited by an attacker ...

Critical Zero-Day in Apache OfBiz ERP System Exposes Businesses to Attack

A new zero-day security flaw has been discovered in Apache OfBiz, an open-source Enterprise Resource Planning ERP system that could be exploited to bypass authentication protections. The vulnerability, tracked as CVE-2023-51467, resides in the login functionality and is the result of an incomplet...

CVE-2023-5989 Stored XSS in Uyumsoft ERP

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

CVE-2023-5989 Stored XSS in Uyumsoft ERP

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

CVE-2023-5988 Reflected XSS in Uyumsoft ERP

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS. This issue affects LioXERP: before v.146...

CVE-2023-5988 Reflected XSS in Uyumsoft ERP

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS. This issue affects LioXERP: before v.146...