3 matches found
EUVD-2025-32020
Malicious code in bioql PyPI...
8.2CVSS6.6AI score0.00305EPSS
SaveExploits1References2
CVE-2025-52040
In Frappe ERPNext 15.57.5, the function getblanketorders at erpnext/controllers/queries.py is vulnerable to SQL Injection, which allows an attacker can extract all information from databases by injecting a SQL query into the blanketordertype parameter...
8.2CVSS0.00305EPSS
SaveExploits1References2
CVE-2025-52040
In Frappe ERPNext 15.57.5, the function getblanketorders at erpnext/controllers/queries.py is vulnerable to SQL Injection, which allows an attacker can extract all information from databases by injecting a SQL query into the blanketordertype parameter...
0.00305EPSS
SaveExploits1References2
20