2739 matches found
PhreeBooks 5.2.3 ERP - Remote Code Execution (2)
Exploit Title: PhreeBooks 5.2.3 - Remote Code Execution Date: 22 Jan 2021 Exploit Author: Kr0ff Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: 5.2.3 Tested on: Windows Server 2016 !/usr/bin/env python3 ''' DESCRIPTION: - PhreeBooks...
Command Execution Vulnerability in ERP-PRO
ERP-PRO is based on the SpringBoot 2.X framework for small and medium-sized enterprises to build open source ERP software. ERP-PRO suffers from a command execution vulnerability. An attacker can exploit this vulnerability to gain control of the server...
File Uploading Vulnerability in Eki Technologies ERP System
Ltd. is a software company focusing on enterprise management, specializing in providing professional information management consulting, software development and online mall development and other information services. A file upload vulnerability exists in the ERP system of EqiTech, which can be...
MSPs, have you picked the right PSA for you yet?
Not long ago, we helped MSPs pick the right remote monitoring and management RMM platform for them, and make it an essential part of their service toolkit. As you may recall, an RMM is a tool that helps MSPs do the work. And what better way to track the work—and other elements associated with...
TerraMaster TOS 4.2.06 - Unauthenticated Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "TerraMaster TOS 4.2.06 - Unauthenticated Remote Code Execution", 'Description' = %q This module exploits a unauthenticated command execution...
Dolibarr ERP-CRM 12.0.3 Remote Code Execution
Exploit Title: Dolibarr ERP-CRM 12.0.3 - Remote Code Execution Authenticated Date: 2020.12.17 Exploit Author: Yilmaz Degirmenci Vendor Homepage: https://github.com/Dolibarr/dolibarr Software Link: https://sourceforge.net/projects/dolibarr/ Version: 12.0.3 Tested on: Kali Linux 2020.2 Vulnerabilit...
Kingdee KIS Professional Edition has a power lifting vulnerability
Kingdee KIS is an ERP software, ERP system integrates supply chain management, financial management, human resource management, customer relationship management, office automation, business analysis, mobile commerce, integrated interfaces and industry plug-ins and other business management...
Command Execution Vulnerability in Huaxia ERP (CNVD-2020-70782)
Huaxia ERP based on SpringBoot framework , aspires to provide small and medium-sized enterprises with open source and good ERP software , currently focusing on sales and inventory + financial functions . HUAXIA ERP has a command execution vulnerability. Attackers can use this vulnerability to...
UFIDA NC suffers from SQL injection vulnerability (CNVD-2020-69451)
UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from the database...
CVE-2020-6316
SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check...
CVE-2020-6316
SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check...
CVE-2020-26807
SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its installation folder which allows anyone to modify the files in the folder...
Default credentials
SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its installation folder which allows anyone to modify the files in the folder...
CVE-2020-6316
SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check...
CVE-2020-26807
The CVE-2020-26807 entry concerns the SAP ERP Client for E-Bilanz, version 1.0, where the installation sets default filesystem permissions in its installation folder that allow unauthorized modification of files. This root cause is consistently described across multiple sources (NVD, Red Hat, CNV...
CVE-2020-26807
SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its installation folder which allows anyone to modify the files in the folder...
CVE-2020-6316
CVE-2020-6316 relates to SAP ERP and SAP S/4 HANA where an authenticated user can view cost records linked to objects without proper authorization in PS reporting, due to a missing authorization check. The connected documents confirm the affected products and the basic impact (information disclos...
CVE-2020-6316
SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check...
erp-leitstand.de Cross Site Scripting vulnerability OBB-1430750
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance...