CVE-2019-25312

概要

参考情報

• inoideas.org · Product
• inoerp/inoERP · Product
• exploit-db.com/exploits/47428 · Exploit
• vulncheck.com/advisories/inoerp-persistent-cross-site-scripting · Third Party Advisory

inoerp のその他の脆弱性

• CVE-2020-28870緊急 9.8In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/form_pers…
• CVE-2019-16894緊急 9.8download.php in inoERP 4.15 allows SQL injection through insecure deserialization.