2768 matches found
CVE-2024-11739 SQLi in Case Informatics' Case ERP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...
CVE-2024-11739 SQLi in Case Informatics' Case ERP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...
CVE-2024-11739
CVE-2024-11739 describes an SQL injection in Case ERP prior to v2.0.1 due to improper neutralization of special elements in SQL commands. Affected product: Case ERP (Case Informatics). Impact per sources: potential for high confidentiality, integrity, and availability impact. The issue is mitigat...
Case ERP SQL注入漏洞
Case ERP is an enterprise resource planning system from Case Inc. A SQL injection vulnerability exists in Case ERP versions prior to V2.0.1, which stems from improper neutralization of special elements in SQL commands, which can lead to SQL injection...
PT-2025-27235 · Case Erp · Case Erp
Name of the Vulnerable Software and Affected Versions: Case ERP versions prior to V2.0.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. There is a critical SQL...
SQL Injection Vulnerability in ERP System of Shenzhen Mingyuan Cloud Technology Co.
The ERP system is a comprehensive information management platform that integrates the functions of housing, customers, sales, finance and human resources. ERP system of Shenzhen Mingyuan Cloud Technology Co., Ltd. suffers from SQL injection vulnerability, which can be exploited by attackers to...
SQL Injection Vulnerability in UFIDA U8Cloud of UFIDA Network Technology Co. Ltd (CNVD-2025-17961)
UFIDA U8Cloud is an enterprise-level ERP used to assist companies in achieving efficient and digitalized business collaboration and process management. A SQL injection vulnerability exists in UFIDA U8Cloud, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2025-49987
Missing Authorization vulnerability in WPFactory CRM ERP Business Solution crm-erp-business-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CRM ERP Business Solution: from n/a through = 1.13...
CVE-2025-4738
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yirmibes Software MY ERP allows SQL Injection.This issue affects MY ERP: before 1.170...
CVE-2025-49987
Missing Authorization vulnerability in WPFactory CRM ERP Business Solution crm-erp-business-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CRM ERP Business Solution: from n/a through = 1.13...
CVE-2025-49987 WordPress CRM ERP Business Solution plugin <= 1.13 - Broken Access Control Vulnerability
Missing Authorization vulnerability in WPFactory CRM ERP Business Solution crm-erp-business-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CRM ERP Business Solution: from n/a through = 1.13...
CVE-2025-49987 WordPress CRM ERP Business Solution plugin <= 1.13 - Broken Access Control Vulnerability
Missing Authorization vulnerability in WPFactory CRM ERP Business Solution allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CRM ERP Business Solution: from n/a through 1.13...
PT-2025-26355 · Wpfactory · Wpfactory Crm Erp Business Solution
Name of the Vulnerable Software and Affected Versions: WPFactory CRM ERP Business Solution versions 1.13 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For...
CVE-2025-4738
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yirmibes Software MY ERP allows SQL Injection. This issue affects MY ERP: before 1.170...
CVE-2025-4738
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yirmibes Software MY ERP allows SQL Injection. This issue affects MY ERP: before 1.170...
CVE-2025-4738 Authenticated SQLi in Yirmibes Software's MY ERP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yirmibes Software MY ERP allows SQL Injection. This issue affects MY ERP: before 1.170...
CVE-2025-4738
CVE-2025-4738 is an authenticated SQL injection in Yirmibes Software MY ERP prior to version 1.170 due to improper neutralization of special elements in SQL commands. The CVSS v3.1 base score is 9.8 (Network, Low complexity, No user interaction, Privileges None; impact to Confidentiality, Integri...
CVE-2025-4738 Authenticated SQLi in Yirmibes Software's MY ERP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yirmibes Software MY ERP allows SQL Injection.This issue affects MY ERP: before 1.170...
PT-2025-26217
Name of the Vulnerable Software and Affected Versions Yirmibes Software MY ERP versions prior to 1.170 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendatio...
Yirmibes Software MY ERP SQL注入漏洞
Yirmibes Software MY ERP is a business management software from Yirmibes Software, Turkey. A SQL injection vulnerability exists in Yirmibes Software MY ERP versions prior to 1.170, which stems from improper neutralization of special elements in SQL commands, and may lead to SQL injection attacks...