CVE-2023-35067

CVE-2023-35067 describes a plaintext password storage vulnerability in Infodrom Software E-Invoice Approval System. The issue allows reading sensitive strings from within an executable, effectively exposing password material if an attacker accesses the stored data. The vulnerability affects the E...

CVE-2023-35066

Summary: CVE-2023-35066 is an SQL injection in Infodrom Software E-Invoice Approval System. The issue arises from improper neutralization of special elements in SQL commands. Affected versions: prior to v.20230701. Impact (as stated): SQL injection could compromise data confidentiality, integrity...