Infodrom

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Infodrom records in CISA KEV

No Infodrom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cfingerd 5 records MEDIUM E-invoice Approval System 2 records MEDIUM

Records

2 records in E-invoice Approval System · all components

TI-2023-17539 CVE-2023-35066 · GHSA-pf54-9c7c-qh5r

SQLi in Infodrom Sofwares E-Invoice Approval System

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom Software E-Invoice Approval System allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-07-25 Fixed in v.20230701 CWE-89

TI-2023-17540 CVE-2023-35067 · GHSA-hrhg-9qv8-cwj7

Plaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval System

MEDIUM 40

Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensitive Strings Within an Executable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00536 Published 2023-07-25 Fixed in v.20230701 CWE-256

Open these records in search →

Critical	2
High	4
Medium	1
Low	0
No CVSS	0