CVE-2025-29390

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...

CVE-2025-31411

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in aribhour Linet ERP-Woocommerce Integration linet-erp-woocommerce-integration allows Path Traversal.This issue affects Linet ERP-Woocommerce Integration: from n/a through = 3.5.12...

CVE-2025-31411

CVE-2025-31411 affects Linet ERP-Woocommerce Integration (WordPress plugin)

CVE-2025-31411 WordPress Linet ERP-Woocommerce Integration plugin <= 3.5.12 - Arbitrary File Read/Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in aribhour Linet ERP-Woocommerce Integration linet-erp-woocommerce-integration allows Path Traversal.This issue affects Linet ERP-Woocommerce Integration: from n/a through = 3.5.12...

WordPress Linet ERP-Woocommerce Integration plugin <= 3.5.12 - Arbitrary File Read/Deletion vulnerability

Arbitrary File Read/Deletion vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Linet ERP-Woocommerce Integration versions = 3.5.12...

CVE-2025-30013

SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modules, when executed with elevated privileges, improperly handle user input, allowing attacker to inject arbitrary OS commands. This vulnerability allows the execution of unintende...

CVE-2025-30582

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in aytechnet DyaPress ERP/CRM dyapress allows PHP Local File Inclusion.This issue affects DyaPress ERP/CRM: from n/a through = 18.0.2.0...

CVE-2025-30582 WordPress DyaPress ERP/CRM plugin <= 18.0.2.0 - Local File Inclusion Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in aytechnet DyaPress ERP/CRM dyapress allows PHP Local File Inclusion.This issue affects DyaPress ERP/CRM: from n/a through = 18.0.2.0...

CVE-2025-30582 WordPress DyaPress ERP/CRM plugin <= 18.0.2.0 - Local File Inclusion Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in aytechnet DyaPress ERP/CRM dyapress allows PHP Local File Inclusion.This issue affects DyaPress ERP/CRM: from n/a through = 18.0.2.0...

CVE-2025-30582

CVE-2025-30582 is an active Local File Inclusion (LFI) vulnerability in aytechnet’s DyaPress ERP/CRM, caused by improper limitation of a pathname to a restricted directory. Affected software ranges from n/a up to version 18.0.2.0. The root cause is inadequate pathname restriction, enabling PHP Lo...

PT-2025-15925 · Unknown · Dyapress Erp/Crm

Name of the Vulnerable Software and Affected Versions: DyaPress ERP/CRM versions through 18.0.2.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion. This enables potential acce...

WordPress plugin Linet ERP-Woocommerce Integration 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

WordPress plugin aytechnet DyaPress ERP/CRM 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

CVE-2025-29390

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...

CVE-2025-29390

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...

PT-2025-15699 · Unknown · Jerryhanjj Erp

Name of the Vulnerable Software and Affected Versions: jerryhanjj ERP version 1.0 Description: The issue concerns SQL injection in the set password function located in application/controllers/home.php. This allows for potential manipulation of database queries. Recommendations: For jerryhanjj ERP...

CVE-2025-29390

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...

CVE-2025-29390

CVE-2025-29390 affects jerryhanjj ERP 1.0. The vulnerability is SQL Injection in the set_password function of application/controllers/home.php. CVSS v3.1 base score 8.8 (HIGH) with attack vector Network, complexity Low, privileges Required Low, user interaction None, and impacts Confidentiality, ...

CVE-2025-30013

SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modules, when executed with elevated privileges, improperly handle user input, allowing attacker to inject arbitrary OS commands. This vulnerability allows the execution of unintende...

CVE-2025-30013 Code Injection vulnerability in SAP ERP BW Business Content

SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modules, when executed with elevated privileges, improperly handle user input, allowing attacker to inject arbitrary OS commands. This vulnerability allows the execution of unintende...