Maxon ERP SQL注入漏洞

Maxon ERP is an ERP software from Maxon ERP, Inc. A security vulnerability exists in Maxon ERP that stems from an incorrect manipulation of the parameter tbsearch resulting in sql injection...

CVE-2022-3878

CVE-2022-3878 : Maxon ERP is affected by a SQL injection in the file path /index.php/purchase_order/browse_data, triggered by manipulating the tb_search argument. Multiple sources describe this as a remote, high-severity issue with a CVSS 3.1 base score of 9.8 (critical, network access, no authen...

CVE-2022-3878 Maxon ERP browse_data sql injection

A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchaseorder/browsedata. The manipulation of the argument tbsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2022-3826

A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The...

CVE-2022-3825

A vulnerability was found in Huaxia ERP 2.3 and classified as critical. Affected by this issue is some unknown functionality of the component User Management. The manipulation of the argument login leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

Sql injection

A vulnerability was found in Huaxia ERP 2.3 and classified as critical. Affected by this issue is some unknown functionality of the component User Management. The manipulation of the argument login leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

Information disclosure

A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The...

CVE-2022-3826 Huaxia ERP Retail Management list information disclosure

A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The...

Huaxia ERP 安全漏洞

Huaxia ERP is an ERP software from Huaxia, China. A security vulnerability exists in Huaxia ERP that originates from an unknown method in the Retail Management component, where manipulation of the search parameter can lead to information disclosure...

CVE-2022-3826 Huaxia ERP Retail Management list information disclosure

A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The...

PT-2022-24312 · Unknown · Huaxia Erp

Name of the Vulnerable Software and Affected Versions: Huaxia ERP version 2.3 Description: A critical issue was found in the User Management component, where the manipulation of the login argument leads to SQL injection. This issue can be exploited remotely. Recommendations: For Huaxia ERP versio...

CVE-2022-3825 Huaxia ERP User Management sql injection

A vulnerability was found in Huaxia ERP 2.3 and classified as critical. Affected by this issue is some unknown functionality of the component User Management. The manipulation of the argument login leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2022-3825 Huaxia ERP User Management sql injection

A vulnerability was found in Huaxia ERP 2.3 and classified as critical. Affected by this issue is some unknown functionality of the component User Management. The manipulation of the argument login leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2022-3825 Huaxia ERP User Management sql injection

A vulnerability was found in Huaxia ERP 2.3 and classified as critical. Affected by this issue is some unknown functionality of the component User Management. The manipulation of the argument login leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2022-3826

CVE-2022-3826 affects Huaxia ERP, specifically the Retail Management component’s /depotHead/list area. The vulnerability arises from manipulation of the search parameter, which leads to information disclosure. Exploitation can be performed remotely, and public disclosure of the exploit has occurr...

CVE-2022-3825

CVE-2022-3825 affects Huaxia ERP 2.3, specifically the User Management component. The issue is an SQL injection triggered by manipulating the login argument, with remote attack potential and publicly disclosed exploits. Several sources confirm the vulnerability, its critical classification, and t...

Dolibarr ERP and CRM Code Injection (CVE-2022-0819)

A code injection vulnerability exists in the Dolibarr ERP/CRM package. The vulnerability is due to insufficient input validation on user provided data...

ERP Sankhya 4.13.x Cross Site Scripting

Exploit Title: ERP Sankhya - XSS to Account Takeover Google Dork: N/A Date: 19/10/2022 Exploit Author: Lucas Alves Da Cunha - 0xLucas Vendor Homepage: https://www.sankhya.com.br Version: Sankhya Om Payload utilizado para capturar os dados da sessão do usuário: Passos para reprodução: 1 -...

ERP Sankhya 跨站脚本漏洞

ERP Sankhya is a web-based enterprise resource planning ERP software from Sankhya. A cross-site scripting vulnerability exists in ERP Sankhya 4.13.x and prior versions that stems from the presence of cross-site scripting...

Dolibarr ERP/CRM Access Control Error Vulnerability

Dolibarr ERP/CRM is a web-based enterprise resource planning ERP and customer relationship management CRM system from the French Dolibarr Foundation. The system can be used to manage products, inventory, invoices, orders, etc. An access control error vulnerability exists in Dolibarr ERP/CRM 15.0....