Lucene search
+L

2740 matches found

CNVD
CNVD
added 2022/01/27 12:00 a.m.62 views

MartDevelopers iResturant SQL Injection Vulnerability (CNVD-2022-91164)

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya. used to integrate social restaurant operations into one system. martDevelopers iResturant 1.0 is vulnerable to a SQL injection vulnerability that stems from adding email and phone parameter values ar...

9.8CVSS3.6AI score0.01313EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/25 1:15 p.m.8 views

CVE-2021-46113

In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service...

8.8CVSS8.3AI score0.03097EPSS
SaveExploits1References4
NVD
NVD
added 2022/01/25 1:15 p.m.26 views

CVE-2021-46113

In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service...

8.8CVSS0.03097EPSS
SaveExploits1References3
Prion
Prion
added 2022/01/25 1:15 p.m.22 views

Remote code execution

In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service...

6.5CVSS9AI score0.03097EPSS
SaveExploits1References3
CVE
CVE
added 2022/01/25 12:56 p.m.62 views

CVE-2021-46113

CVE-2021-46113 affects MartDevelopers KEA-Hotel-ERP (open source). A remote code execution vulnerability is exploited via uploading PHP files through the service’s file upload feature. The issue is documented across multiple sources (NVD, CVE listing, CNNVD) and indicates RCE with potential unaut...

8.8CVSS9AI score0.03097EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/01/25 12:56 p.m.39 views

CVE-2021-46113

In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service...

9.2AI score0.03097EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/01/25 12:00 a.m.12 views

MartDevelopers KEA-Hotel-ERP 代码问题漏洞

MartDevelopers KEA-Hotel-ERP is an open source lightweight hotel enterprise resource planning system. A security vulnerability exists in MartDevelopers KEA-Hotel-ERP that can be exploited by an attacker to upload PHP files using a file upload vulnerability in the service to exploit a remote code...

8.8CVSS8.7AI score0.03097EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/01/25 12:00 a.m.10 views

MartDevelopers Iresturant SQL注入漏洞

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya. used to integrate social restaurant operations into one system. martDevelopers iResturant 1.0 is vulnerable to a SQL injection vulnerability that stems from adding email and phone parameter values ar...

9.8CVSS6.1AI score0.01313EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/01/16 12:00 a.m.43 views

SAP Business One Information Disclosure Vulnerability (CNVD-2022-58469)

SAP Business One is a scalable ERP software from SAP that can help small businesses take greater control of themselves and streamline processes. The vulnerability can be exploited to obtain valuable guidance or public sensitive user information...

5.5CVSS0.4AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/11 12:00 a.m.11 views

SAP ERP 安全漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. There is a security vulnerability in SAP ERP, there is no information about the vulnerability at this time, please stay tuned to CNNVD or the vendor's announcement...

8.1CVSS7.7AI score0.00935EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/11 12:00 a.m.1 views

SAP ERP安全漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. A security vulnerability exists in a number of SAP products. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

5.4AI score
SaveExploits0References1
CNVD
CNVD
added 2021/12/26 12:00 a.m.49 views

Simple Cold Storage Management System SQL Injection Vulnerability

Simple Cold Storage Management System is a powerful and flexible ERP system that includes all the complex processing functionality required for cold storage. simple Cold Storage Management System is vulnerable in v1.0 due to a SQL injection vulnerability in the system's view The vulnerability is...

9.8CVSS2.9AI score0.01239EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/23 12:00 a.m.34 views

Dalmark Systems Systeam has an unspecified vulnerability

Dalmark Systems Systeam is an Erp system from Dalmark Systems, a Brazilian company. version 2.22.8 build 1724 of Dalmark Systems Systeam contains a security vulnerability that could be exploited by an attacker to brute-force a valid user...

5.3CVSS3.9AI score0.00789EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/21 5:15 p.m.12 views

CVE-2021-44874

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. The bi report modul...

8.8CVSS7.4AI score0.0104EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/21 5:15 p.m.28 views

CVE-2021-44877

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...

7.5CVSS0.01022EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/21 5:15 p.m.4 views

CVE-2021-44876

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the identification of t...

5.3CVSS6.1AI score0.00789EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/21 5:15 p.m.25 views

CVE-2021-44874

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. The bi report modul...

8.8CVSS0.0104EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/21 5:15 p.m.33 views

CVE-2021-44876

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the identification of t...

5.3CVSS0.00789EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/21 5:15 p.m.23 views

CVE-2021-44875

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery...

5.3CVSS0.00789EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/21 5:15 p.m.10 views

CVE-2021-44876

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the identification of t...

5.3CVSS5.8AI score0.00789EPSS
SaveExploits0References1
Rows per page
Query Builder