| 제목 | Devs Palace ERP Online 4.0.0 Code Injection |
|---|
| 설명 |
A vulnerability was determined in ERP Online up to 4.0.0. The impacted element is the component "accounts/mr-save" that processes user-supplied input in an improper manner. The manipulation of this input can lead to a stored cross-site scripting (XSS) condition. This allows attackers to inject malicious scripts that are stored by the application and later executed in the context of other users.
The attack can be initiated remotely and may affect multiple users over time with high impact.
|
|---|
| 원천 | ⚠️ https://olografix.org/acme/_poc/ERP_Online-POC1.gif |
|---|
| 사용자 | acme (UID 61097) |
|---|
| 제출 | 2026. 04. 20. PM 10:22 (1 월 ago) |
|---|
| 모더레이션 | 2026. 05. 10. PM 04:46 (20 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 362553 [Devs Palace ERP Online 까지 4.0.0 /accounts/mr-save 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|