GHSA-7CM4-VMF2-8WF2 Dolibarr vulnerable to Eval Injection

Dolibarr ERP & CRM =15.0.3 are vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval...

Dolibarr vulnerable to Eval Injection

Dolibarr ERP & CRM =15.0.3 are vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval...

Design/Logic Flaw

Dolibarr ERP & CRM =15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval...

CVE-2022-40871

Dolibarr ERP & CRM =15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval...

CVE-2022-40871

Dolibarr ERP & CRM =15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval...

CVE-2022-40871

CVE-2022-40871 affects Dolibarr ERP & CRM

CVE-2022-40871

Dolibarr ERP & CRM =15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval...

Microsoft Dynamics CRM Remote Code Execution Vulnerability

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. No details of the vulnerability...

Microsoft Dynamics CRM Remote Code Execution Vulnerability (CNVD-2022-63616)

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. No details of the vulnerability...

Microsoft Dynamics 安全漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. No details of the vulnerability...

CVE-2022-3118

A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...

Sql injection

A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2022-3118 Sourcecodehero ERP System Project processlogin.php sql injection

A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2022-3118 Sourcecodehero ERP System Project processlogin.php sql injection

A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2022-3118

CVE-2022-3118 affects the Sourcecodehero ERP System Project. A SQL injection is triggered via manipulation of the user parameter in /pages/processlogin.php, with_REMOTE exploitability and remote attack vector. Public exploit/disclosure is noted across sources (e.g., NVD/Red Hat/CVE records). The ...

Sourcecodehero ERP System Project SQL注入漏洞

Sourcecodehero ERP System Project is a self-hosted ERP system from Sourcecodehero. Sourcecodehero ERP System Project suffers from a SQL injection vulnerability that originates from unknown processing in /pages/processlogin.php...

PT-2022-4814 · Unknown · Sourcecodehero Erp System Project

Name of the Vulnerable Software and Affected Versions: Sourcecodehero ERP System Project affected versions not specified Description: A critical issue affects the processing of the file /pages/processlogin.php. The manipulation of the user argument leads to SQL injection. The attack may be...

Apache OFBiz Cross-Site Scripting Vulnerability (CNVD-2022-69474)

Apache OFBiz is an enterprise resource planning ERP system from the Apache Foundation in the United States. The system provides a suite of Java-based web application components and tools. Apache OFBiz 18.12.05 and earlier versions contain a security vulnerability that can be exploited by...

Apache OFBiz has an unspecified vulnerability (CNVD-2023-03921)

Apache OFBiz is an enterprise resource planning ERP system from the Apache Foundation. A security vulnerability exists in Apache OFBiz 18.12.05 and earlier, which can be exploited by attackers to conduct regular expression denial-of-service attacks...

Apache OFBiz Code Injection Vulnerability (CNVD-2023-03919)

Apache OFBiz is an enterprise resource planning ERP system from the Apache Foundation. A code injection vulnerability exists in Apache OFBiz versions 18.12.05 and earlier, which could be exploited to insert malicious content into the "Subject" field of the "Contact us" page. field of the "Contact...