jerryhanjj

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

jerryhanjj records in CISA KEV

No jerryhanjj vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Erp · all components

TI-2024-28504 CVE-2024-42565 · GHSA-q567-qjp8-m2mc

HIGH 82

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2024-08-20 No fix listed CWE-89

TI-2024-28502 CVE-2024-42563 · GHSA-2vf4-v2rm-3993

HIGH 82

An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00826 Published 2024-08-20 No fix listed CWE-434

TI-2025-21063 CVE-2025-29390 · GHSA-7hrr-g3xx-3xvg

HIGH 73

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the set_password function in application/controllers/home.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00472 Published 2025-04-09 No fix listed CWE-89

TI-2024-28503 CVE-2024-42564 · GHSA-fcf2-47c2-px5h

HIGH 68

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.0044 Published 2024-08-20 No fix listed CWE-89