Inoideas

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-25312 Feb 11, 15:16 MEDIUM POC This Month

InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated attackers to inject malicious scripts. [CVSS 5.4 MEDIUM]

XSS Inoerp Inoideas

NVD GitHub Exploit-DB

CVSS 3.1

5.4

EPSS

0.1%

CVE-2019-16894 Sep 26, 16:15 CRITICAL POC Act Now

download.php in inoERP 4.15 allows SQL injection through insecure deserialization. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Deserialization Inoerp Inoideas

NVD Exploit-DB

CVSS 3.1

9.8

EPSS

3.0%

CVE-2019-25312

EPSS 0% CVSS 5.4

MEDIUM POC This Month

InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated attackers to inject malicious scripts. [CVSS 5.4 MEDIUM]

XSS Inoerp Inoideas

NVD GitHub Exploit-DB

CVE-2019-16894

EPSS 3% CVSS 9.8

CRITICAL POC Act Now

PHP SQLi Deserialization +2

NVD Exploit-DB