School ERP Ultimate 2018 - fid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: School ERP Ultimate 2018 - 'fid' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://freeschoolerp.com/ Software Link: http://freeschoolerp.com/schoolerp30Nov2017free.zip Software Link:...

School ERP Ultimate 2018 Arbitrary File Download

Exploit Title: School ERP Ultimate 2018 - Arbitrary File Download Dork: N/A Date: 2018-10-21 Exploit Author: Ihsan Sencan Vendor Homepage: http://freeschoolerp.com/ Software Link: http://freeschoolerp.com/schoolerp30Nov2017free.zip Software Link:...

MaxOn ERP Software 8.x-9.x - nomor SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://www.talagasoft.com Software Link: http://demo.maxonerp.com/ Software Download:...

MaxOn ERP Software 8.x / 9.x SQL Injection

Exploit Title: MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.talagasoft.com Software Link: http://demo.maxonerp.com/ Software Download: https://datapacket.dl.sourceforge.net/project/maxon/maxon.rar Version:...

MaxOn ERP Software 8.x-9.x - nomor SQL Injection

MaxOn ERP Software 8.x-9.x - nomor SQL Injection Exploit Title: MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.talagasoft.com Software Link: http://demo.maxonerp.com/ Software Download:...

MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection

Exploit Title: MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.talagasoft.com Software Link: http://demo.maxonerp.com/ Software Download: https://datapacket.dl.sourceforge.net/project/maxon/maxon.rar Version:...

CVE-2018-2474

SAP Fiori 1.0 for SAP ERP HCM Approve Leave Request, version 2 application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection...

Cross site request forgery (csrf)

SAP Fiori 1.0 for SAP ERP HCM Approve Leave Request, version 2 application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection...

CVE-2018-2474

CVE-2018-2474 affects SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2). The issue is improper CSRF protection, allowing an attacker to trick an authenticated user into sending unintended requests to the web server. Root cause: insufficient CSRF defenses in the SAP Fiori applicatio...

CVE-2018-2474

SAP Fiori 1.0 for SAP ERP HCM Approve Leave Request, version 2 application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection...

PT-2018-15590

Name of the Vulnerable Software and Affected Versions SAP Fiori 1.0 for SAP ERP HCM Approve Leave Request, version 2 Description The issue is due to insufficient CSRF protection, allowing an attacker to trick an authenticated user into sending an unintended request to the web server...

CVE-2018-2474: Cross-Site Request Forgery (CSRF)

SAP Fiori 1.0 for SAP ERP HCM Approve Leave Request, version 2 application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection...

PT-2018-3119

Name of the Vulnerable Software and Affected Versions Galaktika ERP affected versions not specified Description The issue is related to the import functionality of XML configurations in the resource management system of Galaktika ERP. It may allow a remote attacker to initiate a request to any...

SQL Injection

Dolibarr ERP/CRM is vulnerable to SQL injection attacks. An attacker is able to execute arbitrary SQL commands via the statutbuy in parameter in product/card.php...

PT-2018-2161

Name of the Vulnerable Software and Affected Versions Galakтиka ERP affected versions not specified Description The issue is related to errors in resource management in the galsrv.exe process of the Galakтиka ERP enterprise resource management system. Exploitation of this issue may allow a remote...

PT-2018-2786

Name of the Vulnerable Software and Affected Versions Галактика ERP affected versions not specified Description The issue is related to the lack of protection for data transmitted using DCOM technology. This could allow a remote attacker to disclose protected information by analyzing network...

PT-2018-3001

Name of the Vulnerable Software and Affected Versions Галактика ERP affected versions not specified Description The issue is related to the lack of protection for transmitted data in the update manager component of the Галактика ERP system. This could allow a remote attacker with access to the...

PT-2018-2162

Name of the Vulnerable Software and Affected Versions Galakтиka ERP affected versions not specified Description The issue is related to insufficient access control in the GalSrv directory used in the system's two-tier architecture. An attacker with USERS group privileges can exploit this by placi...

PT-2018-2159

Name of the Vulnerable Software and Affected Versions Галактика ERP affected versions not specified Description The issue is related to architectural weaknesses in the remote procedure call handlers of the Галактика ERP system, specifically in the atlcore .dll library. This weakness allows for th...

PT-2018-2158

Name of the Vulnerable Software and Affected Versions Галактика ERP affected versions not specified Description The issue is related to weaknesses in the implementation of the browser interaction protocol and the IIS service in Галактика ERP. This could allow an attacker to execute arbitrary...