CVE-2024-44757

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44759

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44756

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

CVE-2024-44758

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...

CVE-2024-44757

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44756

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

CVE-2024-44756

The NUS-M9 ERP Management Software v3.0.0 is vulnerable to a SQL injection flaw within the usercode parameter at the /UserWH/checkLogin API endpoint. This vulnerability allows for potential unauthorized access to sensitive data. As of the current documentation, there is no information regarding a...

CVE-2024-44757

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44757

The NUS-M9 ERP Management Software v3.0.0 contains an arbitrary file download vulnerability in the /Basics/DownloadInpFile component. An attacker can exploit this flaw by sending a crafted interface request to download arbitrary files and gain access to sensitive information . While no patch is c...

CVE-2024-44757

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

PT-2024-31235

Name of the Vulnerable Software and Affected Versions NUS-M9 ERP Management Software version 3.0.0 Description The issue is a SQL injection vulnerability that can be exploited via the usercode parameter at the "/UserWH/checkLogin" API endpoint. This allows for potential unauthorized access to...

CVE-2024-44757: Improper Control of Generation of Code

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44756: Improper Neutralization of Special Elements used in an SQL Command

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

CVE-2024-44758

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...

CVE-2024-44759

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44759

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44759

The NUS-M9 ERP Management Software v3.0.0 is affected by an arbitrary file download vulnerability in the /Doc/DownloadFile component. Attackers can exploit this by sending a crafted interface request to download arbitrary files and access sensitive information . As a temporary workaround, it is r...

CVE-2024-44758

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...

CVE-2024-44758

The NUS-M9 ERP Management Software v3.0.0 is affected by an arbitrary file upload vulnerability in the /Production/UploadFile component. This flaw allows an attacker to execute arbitrary code by uploading specially crafted files. To mitigate this risk, it is recommended to disable the /Production...

CVE-2024-44758

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...