PT-2025-40243

Name of the Vulnerable Software and Affected Versions Frappe ERPNext version 15.57.5 Description The get material requests based on supplier function located at erpnext/stock/doctype/material request/material request.py is susceptible to SQL Injection. An attacker can inject a SQL query into the...

SQL Injection Vulnerability in Supplier Query System of Shanghai Haidian Software Corporation (CNVD-2022-21719)

Vendor inquiry system is based on VMI management ideas, sharing the enterprise's operational business data with suppliers, instantly controlling the sales information and inventory levels as a solution for market demand forecasting and inventory replenishment. A SQL injection vulnerability exists...

SQL Injection Vulnerability in Supplier Inquiry System Co***.aspx Page

Shanghai Haidian Software Co., Ltd. is a provider of informatization solutions focusing on the pharmaceutical distribution industry. A SQL injection vulnerability exists in the Co.aspx page of the supplier query system, which can be exploited by an attacker to obtain sensitive information from th...