TI-2018-15617 CVE-2018-25392 · GHSA-rg4p-86vf-v29c
MaxOn ERP Software 8.x-9.x SQL Injection via nomor Parameter
Priority MEDIUM 64
MaxOn ERP Software 8.x-9.x contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis parameters in the log_activity function.