3 matches found
EUVD-2022-46977
Malicious code in bioql PyPI...
6.5CVSS6.5AI score0.00747EPSS
SaveExploits3References2
Design/Logic Flaw
An issue was discovered in Simmeth Lieferantenmanager before 5.6. In the design of the API, a user is inherently able to fetch arbitrary SQL tables. This leaks all user passwords and MSSQL hashes via /DS/LMAPI/api/SelectionService/GetPaggedTab...
4CVSS6.7AI score0.00747EPSS
SaveExploits3References1Affected Software1
CVE-2022-44014
An issue was discovered in Simmeth Lieferantenmanager before 5.6. In the design of the API, a user is inherently able to fetch arbitrary SQL tables. This leaks all user passwords and MSSQL hashes via /DS/LMAPI/api/SelectionService/GetPaggedTab...
7.8AI score0.00747EPSS
SaveExploits3References1
20