2740 matches found
Priority Software Priority 安全漏洞
Priority Software Priority is an ERP solution from Priority Software, Israel. A security vulnerability exists in Priority Software Priority. An attacker could exploit the vulnerability to gain access to certain functionality that the web application is unable to perform until a parameter change i...
Priority Software Priority 授权问题漏洞
Priority Software Priority is an ERP solution from Priority Software, Israel. A security vulnerability exists in Priority Software Priority. An attacker could exploit the vulnerability to verify which users are in the system and which are not...
FacturaScripts Cross-Site Scripting Vulnerability (CNVD-2022-59043)
FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in versions prior to facturascripts 2022.06, which stems from a lack of filename validation, and can be exploited by an attacker to upload a svg file resulting in a cross-site scripting attack...
FacturaScripts Cross-Site Scripting Vulnerability
FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in FacturaScripts versions prior to 2022.06, which can be exploited by an attacker to execute JavaScript code on the client side...
Logic flaw vulnerability in U8 cloud of UFIDA Network Technology Co.
U8 cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. A logic flaw vulnerability exists in UFIDA U8 cloud, which can be exploited by attackers to obtain sensitive information...
Dolibarr Cross-Site Scripting Vulnerability (CNVD-2022-71638)
Dolibarr is an ERP/CRM system with plug-and-play modules and a well-established ecosystem with customizations and service providers worldwide. version 12.0.5 of Dolibarr suffers from a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting XSS attacks...
FacturaScripts 跨站脚本漏洞
FacturaScripts is an open source ERP software from Carlos Garcia, an individual developer in Spain. A security vulnerability exists in FacturaScripts versions prior to 2022.1 that stems from the presence of a stored cross-site scripting XSS vulnerability...
Avantune Genialcloud ProJ Cross-Site Scripting Vulnerability
Avantune Genialcloud ProJ is a cloud-based ERP platform from Avantune Canada. version 10 of Avantune Genialcloud ProJ is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to inject and execute arbitrary web scripts or HTML via a crafted payload...
GHSA-FC6H-769X-GFF5 Dolibarr ERP and CRM contain XSS Vulnerability
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by and characters in the onpointermove attribute of a BODY element to the user-management feature...
Dolibarr ERP and CRM contain XSS Vulnerability
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by and characters in the onpointermove attribute of a BODY element to the user-management feature...
Dolibarr ERP and CRM contain XSS Vulnerability
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
GHSA-JH3J-XFV2-F9M9 Dolibarr ERP and CRM SQLi
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
GHSA-GFHF-2XR5-2FVW Dolibarr ERP and CRM contain XSS Vulnerability
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
Dolibarr ERP and CRM SQLi
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
GHSA-87R3-4GC8-F897 Dolibarr ERP and CRM contain XSS Vulnerability
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
Dolibarr ERP and CRM contain XSS Vulnerability
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS...
Dolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php
Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...
GHSA-PM57-926C-28MR Dolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php
Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...