2768 matches found
ssm-erp 安全漏洞
ssm-erp is a production management ERP system by fenghaha individual developer. A security vulnerability exists in ssm-erp 0.0.1 and earlier versions, which stems from the mishandling of the parameter uploadFile by the function uploadFile, which could lead to arbitrary file uploads...
Command Execution Vulnerability in UFIDA U8Cloud at UFIDA Network Technology Co.
UFIDA U8Cloud is an enterprise-level ERP used to assist companies in achieving efficient and digitalized business collaboration and process management. A command execution vulnerability exists in UFIDA U8Cloud, which can be exploited by an attacker to execute arbitrary commands...
CVE-2025-3552
A vulnerability was found in Lingxing ERP 2. It has been classified as critical. This affects an unknown part of the file /Api/TinyMce/UploadAjax.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-3551
A vulnerability was found in Lingxing ERP 2 and classified as critical. Affected by this issue is the function DoUpload of the file /Api/FileUpload.ashx?method=DoUpload. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been...
Exploit for Cross-site Scripting in Jquery
SQL Injection Vulnerability in Advaya GEMS ERP Portal v2.1 ⚠️...
CVE-2025-3552
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor was not able to verify the existence of the original vulnerability report and the researche...
CVE-2025-3552
CVE-2025-3552 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2025-3551
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor was not able to verify the existence of the original vulnerability report and the researche...
CVE-2025-3551
CVE-2025-3551 is rejected/not used; not an active vulnerability.
编号撤回
Lingxing ERP is a cross-border e-commerce system from China-based Lingxing Lingxing. This CVE number has been withdrawn...
编号撤回
Lingxing ERP is a cross-border e-commerce system from China-based Lingxing Lingxing. This CVE number has been withdrawn...
PT-2025-16203 · Unknown · Lingxing Erp
Name of the Vulnerable Software and Affected Versions: Lingxing ERP version 2 Description: A critical issue was found in the function DoUpload of the file /Api/FileUpload.ashx?method=DoUpload. The manipulation of the argument File leads to unrestricted upload. This issue can be exploited remotely...
VulnCheck KEV: CVE-2024-13979
A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...
SAP ERP BW Business Content Code Injection Vulnerability
SAP ERP BW Business Content is a cloud-based e-commerce platform that helps companies create a personalized and seamless buying experience for their customers. SAP ERP BW Business Content suffers from a code injection vulnerability that can be exploited by an attacker to execute arbitrary code...
CVE-2025-31411
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in aribhour Linet ERP-Woocommerce Integration linet-erp-woocommerce-integration allows Path Traversal.This issue affects Linet ERP-Woocommerce Integration: from n/a through = 3.5.12...
CVE-2025-30582
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in aytechnet DyaPress ERP/CRM dyapress allows PHP Local File Inclusion.This issue affects DyaPress ERP/CRM: from n/a through = 18.0.2.0...