2752 matches found
CVE-2013-2093
Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands...
CVE-2013-2092
Cross-site Scripting XSS in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php...
CVE-2013-2092
CVE-2013-2092: Dolibarr ERP/CRM 3.3.1 contains a Cross‑Site Scripting (XSS) in functions.lib.php that allows remote attackers to inject arbitrary web script or HTML. Root cause is a lack of input sanitization in that library file. Impact per sources is limited to XSS on affected pages; exploitati...
CVE-2013-2091
CVE-2013-2091 affects Dolibarr ERP/CRM 3.3.1 with a SQL injection via the pays parameter in fiche.php. The root cause is unsanitized input in that parameter, enabling remote attackers to execute arbitrary SQL commands. Documented impact is high/critical depending on CVSS vector, with potential ex...
CVE-2013-2091
SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php...
CVE-2019-0386
Order processing in SAP ERP Sales corrected in SAPAPPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and S4HANA Sales corrected in S4CORE 1.0, 1.01, 1.02, 1.03, 1.04 does not execute the required authorization checks for an authenticated user, which can result in an escalation of privileges...
CVE-2019-0386
Order processing in SAP ERP Sales corrected in SAPAPPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and S4HANA Sales corrected in S4CORE 1.0, 1.01, 1.02, 1.03, 1.04 does not execute the required authorization checks for an authenticated user, which can result in an escalation of privileges...
CVE-2019-0386
CVE-2019-0386 concerns SAP ERP Sales and S/4HANA Sales where order processing does not perform required authorization checks for an authenticated user, enabling privilege escalation. Affected: SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and S4CORE 1.0, 1.01, 1.02, 1.03, 1.04. Roo...
SAP ERP Sales and S/4HANA Sales CVE-2019-0386 Remote Authorization Bypass Vulnerability
Description SAP ERP Sales and S/4HANA Sales are prone to an authorization-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks. Technologies Affected SAP Erp 6.0 SAP Erp 6.02 SAP Erp 6.03 SAP Erp 6.04...
Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-39369)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...
CVE-2019-17223
There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...
CVE-2019-17223
There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...
CVE-2019-17223
There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...
Design/Logic Flaw
There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...
CVE-2019-17223
There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...
CVE-2019-17223
Dolibarr ERP/CRM 10.0.2 is affected by CVE-2019-17223, an HTML Injection in the Note field (via user/note.php). The vulnerability originates from unfiltered input, enabling injection in notes. Public references confirm Dolibarr 10.0.2 as affected; CVSS data from NVD shows CVSSv2 base 4.3 (MEDIUM)...
The vulnerability of the GALAXY ERP resource management system allows a hacker to replace software updates.
The vulnerability of the Plain FTP protocol used by the “Update Manager” component of the enterprise resource management system Galaktika ERP is related to the lack of protection for transmitted data. Exploiting this vulnerability can allow a malicious actor to gain access to software updates and...
The vulnerability of the Enterprise Resource Management System “Galaktika ERP” allows a perpetrator to execute arbitrary codes.
The vulnerability of the “Update Manager” component of the enterprise resource management system Galaktika ERP is related to the lack of protection for transmitted data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has access to the update server, to execute...
Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-33854)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...
DIGIT CENTRIS 4 ERP - datum1 SQL Injection
DIGIT CENTRIS 4 ERP - datum1 SQL Injection Exploit Title: DIGIT CENTRIS 4 ERP - 'datum1' SQL Injection Date: 2019-09-19 Exploit Author: n1x MS-WEB Vendor Homepage: http://www.digit-rs.com/ Product Homepage: http://digit-rs.com/centris.html Version: Every version CVE : N/A Vulnerable parameters:...