| Title | MAXON ERP Software has a SQL injection vulnerability |
|---|
| Description | A vulnerability classified as critical was found in MAXON ERP Software. This will affect the file index Unknown part of php. For parameter tb_ The search operation results in SQL injection
The vulnerability is that after the administrator logs in the background, the parameter of commodity order information query is brought into the database for query without filtering, resulting in SQL injection vulnerability |
|---|
| Source | ⚠️ https://github.com/huclilu/CVE_Add/edit/main/README.md |
|---|
| User | ace. (UID 34853) |
|---|
| Submission | 11/03/2022 17:21 (4 years ago) |
|---|
| Moderation | 11/07/2022 14:08 (4 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 213039 [Maxon ERP browse_data tb_search sql injection] |
|---|
| Points | 20 |
|---|