Logic flaws and vulnerabilities in concrete friend mixing plant ERP management system

Founded in 2011, Hunan AOKE Network Technology Co., Ltd. is a concrete enterprise informatization solution provider. A logic flaw vulnerability exists in the concrete friend mixing station ERP management system, which can be exploited by attackers to bypass authentication and obtain sensitive...

Huaxia ERP system has information leakage vulnerability

Huaxia ERP based on the SpringBoot framework and SaaS model for small and medium-sized enterprises to provide open source ERP software , currently focusing on sales and inventory financial production functions . Huaxia ERP system has an information leakage vulnerability that can be exploited by...

Critical Sage X3 RCE Bug Allows Full System Takeovers

Four vulnerabilities afflict the popular Sage X3 enterprise resource planning ERP platform, researchers found – including one critical bug that rates 10 out of 10 on the CVSS vulnerability-severity scale. Two of the bugs could be chained together to allow complete system takeovers, with potential...

SQL Injection Vulnerability in the ERP System of Chengdu Pan-Pro Software Development Co.

Chengdu Pan-Pro Software Development Co., Ltd, business scope contains material management system, construction cost management software, contract management system, project progress management system and so on. The ERP system of Chengdu Pan-Pro Software Development Co., Ltd. suffers from a SQL...

File upload vulnerability in Speedcat ERP backend management system

Ltd. is an e-commerce management product specially developed for cross border e-commerce platforms such as Selling, Amazon and Ebay. There is a file upload vulnerability in the Quickcat ERP backend management system, which can be exploited by attackers to control the server by uploading Trojan...

CVE-2021-27828

SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries...

CVE-2021-27828

SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries...

Sql injection

SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries...

CVE-2021-27828

SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries...

CVE-2021-27828

CVE-2021-27828 affects In4Suite ERP 3.2.74.1370, where SQL injection arises from lack of validation of externally entered SQL statements in CheckLogin.asp, enabling remote attackers to modify or delete data and cause persistent changes. Evidence includes exploit-db PoC showing crafted login paylo...

SQL Injection Vulnerability in the Home Furnishing ERP Management System of Shanghai Furnishing Alliance Information Technology Co.

Home furnishing ERP management system can make the company's pre-sale and after-sale customer resource management more standard, standardized, humanized, maximize the exploitation of customer service value, enhance the company's maximum customer service value. There is a SQL injection vulnerabili...

In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection

Exploit Title: In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection Date: 18/05/2021 Exploit Author: Gulab Mondal Vendor Homepage: https://www.in4velocity.com/in4suite-erp.html Version: In4Suite ERP 3.2.74.1370 Tested on: Windows CVE: CVE-2021-27828 ----------------------------------------- SQL...

In4Suit ERP 3.2.74.1370 - (txtLoginId) SQL injection Vulnerability

Exploit Title: In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection Exploit Author: Gulab Mondal Vendor Homepage: https://www.in4velocity.com/in4suite-erp.html Version: In4Suite ERP 3.2.74.1370 Tested on: Windows ----------------------------------------- SQL injection in In4Suite ERP 3.2.74.1370...

SQL Injection Vulnerability in the Home Furnishing ERP Management System of Shanghai Furnishing Alliance Information Technology Co.

Home furnishing ERP management system can make the company's pre-sale and after-sale customer resource management more standard, standardized, humanized, maximize the exploitation of customer service value, enhance the company's maximum customer service value. There is a SQL injection vulnerabili...

Command execution vulnerability in U8 cloud of UFIDA Network Technology Co.

U8 cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. A command execution vulnerability exists in UFIDA U8 cloud, which can be exploited by an attacker to gain control of the...

Unauthorized Access Vulnerability in concrete friend mixing plant ERP management system

Hunan AOKE Network Technology Co., Ltd. was founded in 2011, located in Changsha, Hunan Province, the capital of construction machinery, to create the most forward-looking parts trading platform in the concrete industry, and is China's leading provider of information technology solutions for...

CVE-2021-30171

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

CVE-2021-30170

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

CVE-2021-30170

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

Cross site scripting

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...