CVE-2025-9339 in ERPinformación

Resumen

por MITRE • 2025-10-21

SQL injection vulnerability in the fields of warehouse document filtering form in SIMPLE.ERP software allows logged-in user to send a payload of up to 20 characters. Identified use case allows to delete tables with a name of maximum 6 characters. We weren't able to identify a way to exfiltrate data within query character limit.

























This issue affects SIMPLE.ERP in versions before [email protected].

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

CERT-PL

Reservar

2025-08-22

Divulgación

2025-10-21

Moderación

aceptado

Artículo

VDB-329137

CPE

listo

EPSS

0.00262

KEV

no

Actividades

muy bajo

Sector

Police, Finance, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-9339
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-9339
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-9339/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!