CVE-2022-3878 — Maxon ERP browse_data sql injection

CVE-2022-3878

Maxon ERP browse_data sql injection PUBLISHED

Description (CNA)

A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchase_order/browse_data. The manipulation of the argument tb_search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213039.

Affected (CNA)

Vendor / product	Versions
Maxon / ERP	affected n/a

CWE

CWE-707

References

https://github.com/huclilu/CVE_Add
https://vuldb.com/?id.213039

ADP enrichment

CVE

No English description supplied.

https://github.com/huclilu/CVE_Add
https://vuldb.com/?id.213039

CISA-ADP

No English description supplied.

No references supplied.