2740 matches found
CVE-2022-3118 Sourcecodehero ERP System Project processlogin.php sql injection
A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-3118
CVE-2022-3118 affects the Sourcecodehero ERP System Project. A SQL injection is triggered via manipulation of the user parameter in /pages/processlogin.php, with_REMOTE exploitability and remote attack vector. Public exploit/disclosure is noted across sources (e.g., NVD/Red Hat/CVE records). The ...
Sourcecodehero ERP System Project SQL注入漏洞
Sourcecodehero ERP System Project is a self-hosted ERP system from Sourcecodehero. Sourcecodehero ERP System Project suffers from a SQL injection vulnerability that originates from unknown processing in /pages/processlogin.php...
PT-2022-4814 · Unknown · Sourcecodehero Erp System Project
Name of the Vulnerable Software and Affected Versions: Sourcecodehero ERP System Project affected versions not specified Description: A critical issue affects the processing of the file /pages/processlogin.php. The manipulation of the user argument leads to SQL injection. The attack may be...
Apache OFBiz Cross-Site Scripting Vulnerability (CNVD-2022-69474)
Apache OFBiz is an enterprise resource planning ERP system from the Apache Foundation in the United States. The system provides a suite of Java-based web application components and tools. Apache OFBiz 18.12.05 and earlier versions contain a security vulnerability that can be exploited by...
Apache OFBiz has an unspecified vulnerability (CNVD-2023-03921)
Apache OFBiz is an enterprise resource planning ERP system from the Apache Foundation. A security vulnerability exists in Apache OFBiz 18.12.05 and earlier, which can be exploited by attackers to conduct regular expression denial-of-service attacks...
Apache OFBiz Code Injection Vulnerability (CNVD-2023-03919)
Apache OFBiz is an enterprise resource planning ERP system from the Apache Foundation. A code injection vulnerability exists in Apache OFBiz versions 18.12.05 and earlier, which could be exploited to insert malicious content into the "Subject" field of the "Contact us" page. field of the "Contact...
Command Execution Vulnerability in the T+ Proprietary Cloud
Smooth T+ Exclusive Cloud is a cloud ERP system that integrates the whole scenario of doing business, managing business and watching business. A command execution vulnerability exists in Smooth Jietong T+ Exclusive Cloud, which can be exploited by an attacker to execute arbitrary commands...
GHSA-QHM8-69QH-G76J Missing password strength check in notrinos/notrinos-erp
In versions of notrinos/notrinoserp prior to 0.7 new account passwords were missing a password strength check...
Missing password strength check in notrinos/notrinos-erp
In versions of notrinos/notrinoserp prior to 0.7 new account passwords were missing a password strength check...
notrinoserp 安全漏洞
notrinoserp is a web-based ERP by Phương Individual Developer, an accounting system written in PHP and MySql. A security vulnerability exists in versions of notrinoserp prior to 0.7, which stems from its failure to properly restrict rendered UI layers or frames...
GHSA-44W5-Q257-8428 Exposure of password hashes in notrinos/notrinos-erp
The AP officers account is authorized to Backup and Restore the Database, Due to this he/she can download the backup and see the password hash of the System Administrator account, The weak hash MD5 of the password can be easily cracked and get the admin password...
notrinoserp 安全漏洞
notrinoserp is a web-based ERP by Phương Individual Developer, an accounting system written in PHP and MySql. A security vulnerability exists in versions prior to notrinoserp 0.7, which stems from not requiring users to use strong passwords. An attacker could exploit this vulnerability to...
CVE-2022-2871
Cross-site Scripting XSS - Stored in GitHub repository notrinos/notrinoserp prior to 0.7...
notrinosrp 跨站脚本漏洞
notrinoserp is a web-based ERP by Phương Individual Developer, an accounting system written in PHP and MySql. A cross-site scripting vulnerability exists in versions prior to notrinosrp 0.7, which originates from cross-site scripting XSS...
The vulnerability of the Add Photo and Import Staff functions in the school management web system School ERP Pro allows a perpetrator to execute arbitrary codes.
The vulnerability of the Add Photo and Import Staff functions in the school management web system School ERP Pro relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by loading a specially created malware file...
CVE-2022-34001
Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...
CVE-2022-34001
Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously...
