Описание
SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ProductVendor Advisory
- ExploitThird Party AdvisoryVDB Entry
- ProductVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:in4velocity:in4suite_erp:3.2.74.1370:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.00768
Низкий
9.1 Critical
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 3 лет назад
SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
EPSS
Процентиль: 73%
0.00768
Низкий
9.1 Critical
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-89