Executive brief
NotrinosERP vulnerable to SQL Injection
Affected products
- Packagist notrinos/notrinos-erp
Junglewise Threat Intelligence
CVE-2023-24788: NotrinosERP vulnerable to SQL Injection
CVE-2023-24788 · Severity: low · CVSS 3.1 · Published 2023-03-23
Technologies: notrinos/notrinos-erp (Packagist). Vendors: Packagist.
Related threats
- NotrinosERP: Authenticated arbitrary file upload leads to remote code execution via HRM employee "Documents" (doc_file)
- NotrinosERP arbitrary file upload in HRM employee documents
- Missing password strength check in notrinos/notrinos-erp
- Exposure of password hashes in notrinos/notrinos-erp
- NotrinosERP Cross-site Scripting vulnerability