CVE-2024-49373 Centurion ERP user can view projects from organizations they're not apart of

No Fuss Computing Centurion ERP is open source enterprise resource planning ERP software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of. Version 1.2.1 fixes the problem...

No Fuss Computing Centurion ERP 安全漏洞

No Fuss Computing Centurion ERP is an open source enterprise resource planning ERP software from No Fuss Computing. A security vulnerability exists in No Fuss Computing Centurion ERP versions prior to 1.2.1, which originates from an authenticated user being able to view projects that do not belon...

PT-2024-26995 · Orangehrm · Orangehrm

Name of the Vulnerable Software and Affected Versions: OrangeHRM version 3.3.3 Description: The issue allows for SQL injection in the sortOrder parameter of the admin/viewProjects endpoint. This could potentially be exploited to extract or modify sensitive data. Recommendations: For OrangeHRM...