Veille CVE

Recherche « Talagasoft MaxOn ERP »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Talagasoft MaxOn ERP » ✕
  1. CVE-2018-25392 7.1 Élevée

    Talagasoft MaxOn ERP

    MaxOn ERP Software 8.x-9.x contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis parameters in the log_activity function. Attackers can send POST requests to /index.php/user/log_activity with malicious SQL code in these parameters to extract sensitive database information including version and database names.