CVE-2023-52265

IDURAR aka idurar-erp-crm through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data...

CVE-2023-52265

IDURAR aka idurar-erp-crm through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data...

CVE-2023-27742

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

CVE-2023-27742

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

Sql injection

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

PT-2023-21313 · Unknown · Idurar Erp/Crm

Name of the Vulnerable Software and Affected Versions: IDURAR ERP/CRM version 1 Description: The issue is related to a SQL injection vulnerability. It affects the /api/login component. Recommendations: For IDURAR ERP/CRM version 1, consider restricting access to the /api/login endpoint until a...

CVE-2023-27742

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

IDURAR ERP/CRM SQL注入漏洞

IDURAR ERP/CRM is an open source content management system by Salah Eddine Lalami Individual Developer. A security vulnerability exists in IDURAR ERP/CRM v1, which was discovered to contain an SQL injection vulnerability via components/api/login...

CVE-2023-27742

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login...

CVE-2023-27742

CVE-2023-27742 affects IDURAR ERP/CRM v1, with a SQL injection vulnerability in the /api/login component. The issue is documented as a high-severity, network-accessible flaw (CVSS v3.1: 9.8, Confidentiality/Integrity/Availability Impact: High). The available sources consistently state the vulnera...